The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7.

Mac OS X 10.6.7 contains security fixes for the following products :

  - AirPort
  - Apache
  - AppleScript
  - ATS
  - bzip2
  - CarbonCore
  - ClamAV
  - CoreText
  - File Quarantine
  - HFS
  - ImageIO
  - Image RAW
  - Installer
  - Kerberos
  - Kernel
  - Libinfo
  - libxml
  - Mailman
  - PHP
  - QuickLook
  - QuickTime
  - Ruby
  - Samba
  - Subversion
  - Terminal
  - X11

Multiple remote vulnerabilities in the MIT krb5 package have been fixed. They affect client as well as server software. CVE-2010-1323, CVE-2010-1324,CVE-2010-4020 and CVE-2010-4021 have been assigned to this issue.

It was discovered that Kerberos did not properly determine the acceptability of certain checksums. A remote attacker could use certain checksums to alter the prompt message, modify a response to a Key Distribution Center (KDC) or forge a KRB-SAFE message.
(CVE-2010-1323)

It was discovered that Kerberos did not properly determine the acceptability of certain checksums. A remote attacker could use certain checksums to forge GSS tokens or gain privileges. This issue only affected Ubuntu 9.10, 10.04 LTS and 10.10. (CVE-2010-1324)

It was discovered that Kerberos did not reject RC4 key-derivation checksums. An authenticated remote user could use this issue to forge AD-SIGNEDPATH or AD-KDC-ISSUED signatures and possibly gain privileges. This issue only affected Ubuntu 10.04 LTS and 10.10.
(CVE-2010-4020)

It was discovered that Kerberos did not properly restrict the use of TGT credentials for armoring TGS requests. A remote authenticated user could use this flaw to impersonate a client. This issue only affected Ubuntu 9.10. (CVE-2010-4021).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple remote vulnerabilities in the MIT krb5 package have been fixed. They affect client as well as server software.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0925 advisory.

    Kerberos is a network authentication system which allows clients and     servers to authenticate to each other using symmetric encryption and a     trusted third party, the Key Distribution Center (KDC).

    Multiple checksum validation flaws were discovered in the MIT Kerberos     implementation. A remote attacker could use these flaws to tamper with     certain Kerberos protocol packets and, possibly, bypass authentication or     authorization mechanisms and escalate their privileges. (CVE-2010-1323,     CVE-2010-1324, CVE-2010-4020)

    Red Hat would like to thank the MIT Kerberos Team for reporting these     issues.

    This update also fixes the following bug:

    * When attempting to perform PKINIT pre-authentication, if the client had     more than one possible candidate certificate the client could fail to     select the certificate and key to use. This usually occurred if certificate     selection was configured to use the value of the keyUsage extension, or if     any of the candidate certificates did not contain a subjectAltName     extension. Consequently, the client attempted to perform pre-authentication     using a different (usually password-based) mechanism. (BZ#644825)

    All krb5 users should upgrade to these updated packages, which contain     backported patches to correct these issues. After installing the updated     packages, the krb5kdc daemon will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
52754	Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	3/22/2011	5/28/2024	high
53672	openSUSE Security Update : krb5 (openSUSE-SU-2010:1053-1)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	medium
51116	Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : krb5 vulnerabilities (USN-1030-1)	Nessus	Ubuntu Local Security Checks	12/10/2010	9/19/2019	medium
51159	SuSE 10 Security Update : krb5 (ZYPP Patch Number 7243)	Nessus	SuSE Local Security Checks	12/14/2010	1/14/2021	medium
50852	RHEL 6 : krb5 (RHSA-2010:0925)	Nessus	Red Hat Local Security Checks	12/1/2010	4/14/2025	medium

Detections

Analytics

Plugins Search

high

medium

medium

medium

medium