Уведомление безопасности DSA-1367

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

krb5-admin-server (any) krb5-clients (any) krb5-doc (any) krb5-ftpd (any) krb5-kdc (any) krb5-rsh-server (any) krb5-telnetd (any) krb5-user (any) libkadm55 (any) libkrb53 (any) libkrb5-dbg (any) libkrb5-dev (any)

Уведомление безопасности об уязвимостях krb5-rsh-server, krb5-doc, krb5-telnetd, libkrb53, libkrb5-dev, krb5-ftpd, krb5-admin-server, libkadm55, libkrb5-dbg, krb5-user, krb5-clients, krb5-kdc

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
s390x:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
i686:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
hppa:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
sparc:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
x86-64:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
alpha:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
ia64:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
mips:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
noarch:
krb5-doc - 1.4.4-7etch3
mipsel:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3
arm:
krb5-admin-server - 1.4.4-7etch3
krb5-clients - 1.4.4-7etch3
krb5-ftpd - 1.4.4-7etch3
krb5-kdc - 1.4.4-7etch3
krb5-rsh-server - 1.4.4-7etch3
krb5-telnetd - 1.4.4-7etch3
krb5-user - 1.4.4-7etch3
libkadm55 - 1.4.4-7etch3
libkrb5-dbg - 1.4.4-7etch3
libkrb5-dev - 1.4.4-7etch3
libkrb53 - 1.4.4-7etch3

http://www.debian.org/security/dsa-1367/

Источник: CVE
Наименование: CVE-2007-3999
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3999