FreeBSD : krb5 1.11 -- New release/fix multiple vulnerabilities (dbf9e66c-bd50-11e4-a7ba-206a8a720317)

This script is Copyright (C) 2015 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing a security-related update.

Description :

The MIT Kerberos team announces the availability of MIT Kerberos 5
Release 1.11.6 :

Handle certain invalid RFC 1964 GSS tokens correctly to avoid invalid
memory reference vulnerabilities. [CVE-2014-4341

Fix memory management vulnerabilities in GSSAPI SPNEGO. [CVE-2014-4343
CVE-2014-4344]

Fix buffer overflow vulnerability in LDAP KDB back end.
[CVE-2014-4345]

Fix multiple vulnerabilities in the LDAP KDC back end. [CVE-2014-5354
CVE-2014-5353]

Fix multiple kadmind vulnerabilities, some of which are based in the
gssrpc library. [CVE-2014-5352 CVE-2014-9421 CVE-2014-9422
CVE-2014-9423]

See also :

http://web.mit.edu/kerberos/krb5-1.11/README-1.11.6.txt
http://www.nessus.org/u?b48356cd

Solution :

Update the affected package.

Risk factor :

High

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 81534 ()

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now