SuSE 10 Security Update : krb5 (ZYPP Patch Number 3821)
High Nessus Plugin ID 29493
The remote SuSE 10 host is missing a security-related patch.
This update fixes a stack-based buffer overflow in kadmind which can be exploited by authenticated remote users to gain root. (CVE-2007-2798) Additionally two bugs in the RPC library of kadmind were fixed that can lead to remote system compromise. (CVE-2007-2442 / CVE-2007-2443) Note that third-party applications using the RPC library are vulnerable, too.