FreeBSD : heimdal -- Multiple vulnerabilities (b62c80c2-b81a-11da-bec5-00123ffe8333)

high Nessus Plugin ID 21499

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

A Project heimdal Security Advisory reports :

The telnet client program in Heimdal has buffer overflows in the functions slc_add_reply() and env_opt_add(), which may lead to remote code execution.

The telnetd server program in Heimdal has buffer overflows in the function getterminaltype, which may lead to remote code execution.

The rshd server in Heimdal has a privilege escalation bug when storing forwarded credentials. The code allowes a user to overwrite a file with its credential cache, and get ownership of the file.

Solution

Update the affected package.

Plugin Details

Severity: High

ID: 21499

File Name: freebsd_pkg_b62c80c2b81a11dabec500123ffe8333.nasl

Version: 1.14

Type: local

Family: FreeBSD Local Security Checks

Published: 5/13/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:heimdal, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 3/20/2006

Vulnerability Publication Date: 2/6/2006

Reference Information

CVE: CVE-2005-0469, CVE-2005-2040, CVE-2006-0582, CVE-2006-0677

Detections

Analytics