openSUSE 10 Security Update : krb5 (krb5-3820)
High Nessus Plugin ID 27309
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis update fixes a stack-based buffer overflow in kadmind which can be exploited by authenticated remote users to gain root.
(CVE-2007-2798) Additionally two bugs in the RPC library of kadmind were fixed that can lead to remote system compromise. (CVE-2007-2442, CVE-2007-2443) Note that third-party applications using the RPC library are vulnerable, too.
SolutionUpdate the affected krb5 packages.