This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. (CVE-2010-1321: CVSS v2 Base Score: 6.8 (MEDIUM) (AV:N/AC:L/Au:S/C:N/I:N/A:C))

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Apache Tomcat 
  - Apache Tomcat Manager
  - cURL 
  - Java Runtime Environment (JRE)
  - Kernel 
  - Microsoft SQL Express
  - OpenSSL
  - pam_krb5

IBM Java 1.4.2 SR13 was updated to FP8 to fix various bugs and security issues.

The following security issues were fixed :

  - The kg_accept_krb5 function in krb5/accept_sec_context.c     in the GSS-API library in MIT Kerberos 5 (aka krb5)     through 1.7.1 and 1.8 before 1.8.2, as used in kadmind     and other applications, does not properly check for     invalid GSS-API tokens, which allows remote     authenticated users to cause a denial of service (NULL     pointer dereference and daemon crash) via an AP-REQ     message in which the authenticator's checksum field is     missing. (CVE-2010-1321)

  - Unspecified vulnerability in the Networking component in     Oracle Java SE and Java for Business 6 Update 21, 5.0     Update 25, 1.4.2_27, and 1.3.1_28 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the October 2010 CPU.
    Oracle has not commented on claims from a reliable     downstream vendor that HttpURLConnection does not     properly check for the allowHttpTrace permission, which     allows untrusted code to perform HTTP TRACE requests.
    (CVE-2010-3574)

IBM Java 6 SR9 was released which fixes a lot of security issues.

IBM JDK Alerts can also be found on this page:
http://www.ibm.com/developerworks/java/jdk/alerts/

IBM Java 1.4.2 SR13 was updated to FP8 to fix various bugs and security issues.

The following security issues were fixed :

  - The kg_accept_krb5 function in krb5/accept_sec_context.c     in the GSS-API library in MIT Kerberos 5 (aka krb5)     through 1.7.1 and 1.8 before 1.8.2, as used in kadmind     and other applications, does not properly check for     invalid GSS-API tokens, which allows remote     authenticated users to cause a denial of service (NULL     pointer dereference and daemon crash) via an AP-REQ     message in which the authenticator's checksum field is     missing. (CVE-2010-1321)

  - Unspecified vulnerability in the Networking component in     Oracle Java SE and Java for Business 6 Update 21, 5.0     Update 25, 1.4.2_27, and 1.3.1_28 allows remote     attackers to affect confidentiality, integrity, and     availability via unknown vectors. NOTE: the previous     information was obtained from the October 2010 CPU.
    Oracle has not commented on claims from a reliable     downstream vendor that HttpURLConnection does not     properly check for the allowHttpTrace permission, which     allows untrusted code to perform HTTP TRACE requests.
    (CVE-2010-3574)

  - The Java Runtime Environment hangs forever when     converting '2.2250738585072012e-308' to a binary     floating-point number. (CVE-2010-4476)

USN-940-1 fixed vulnerabilities in Kerberos. This update provides the corresponding updates for Ubuntu 10.04.

Joel Johnson, Brian Almeida, and Shawn Emery discovered that Kerberos did not correctly verify certain packet structures. An unauthenticated remote attacker could send specially crafted traffic to cause the KDC or kadmind services to crash, leading to a denial of service.
(CVE-2010-1320, CVE-2010-1321).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
46728	openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)	Nessus	SuSE Local Security Checks	5/26/2010	1/14/2021	medium
47510	Fedora 13 : krb5-1.7.1-10.fc13 (2010-8749)	Nessus	Fedora Local Security Checks	7/1/2010	1/11/2021	medium
49876	SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 7046)	Nessus	SuSE Local Security Checks	10/11/2010	1/14/2021	medium
89674	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0003) (remote check)	Nessus	Misc.	3/4/2016	5/25/2022	high
51660	SuSE9 Security Update : IBM Java (YOU Patch Number 12669)	Nessus	SuSE Local Security Checks	1/24/2011	1/14/2021	critical
51667	SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 3724)	Nessus	SuSE Local Security Checks	1/25/2011	1/14/2021	critical
52631	SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4024)	Nessus	SuSE Local Security Checks	3/11/2011	1/19/2021	critical
47799	Ubuntu 10.04 LTS : krb5 vulnerability (USN-940-2)	Nessus	Ubuntu Local Security Checks	7/22/2010	9/19/2019	medium

Detections

Analytics

Plugins Search

medium

medium

medium

high

critical

critical

critical

medium