DSA-504-1 heimdal -- не производится очистка входного текста

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

heimdal-clients (any) heimdal-clients-x (any) heimdal-dev (any) heimdal-docs (any) heimdal-kdc (any) heimdal-lib (any) heimdal-servers (any) heimdal-servers-x (any) libasn1-5-heimdal (any) libcomerr1-heimdal (any) libgssapi1-heimdal (any) libhdb7-heimdal (any) libkadm5clnt4-heimdal (any) libkadm5srv7-heimdal (any) libkafs0-heimdal (any) libkrb5-17-heimdal (any) libotp0-heimdal (any) libroken9-heimdal (any) libsl0-heimdal (any) libss0-heimdal (any)

Евгений Демидов обнаружил потенциальную возможность переполнения буфера
в компоненте поддержки Kerberos 4 heimdal, свободной реализации Kerberos 5.
Проблема содержится в kadmind, сервере администрирования базы данных
Kerberos. Эта ошибка, вероятно, может быть использована, чтобы заставить
демон прочитать блока данных отрицательного размера, что приведёт к
непредсказуемому поведению.
В стабильном дистрибутиве (woody) эта проблема исправлена
в версии 0.4e-7.woody.9.
В нестабильном дистрибутиве (sid) эта проблема исправлена
в версии 0.6.2-1.
Мы рекомендуем вам обновил пакет heimdal и связанные с ним пакеты.

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 3.0:
ppc:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
s390x:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
m68k:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
i686:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
hppa:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
sparc:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
alpha:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
ia64:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
mips:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
noarch:
heimdal-docs - 0.4e-7.woody.9
heimdal-lib - 0.4e-7.woody.9
mipsel:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9
arm:
heimdal-clients - 0.4e-7.woody.9
heimdal-clients-x - 0.4e-7.woody.9
heimdal-dev - 0.4e-7.woody.9
heimdal-kdc - 0.4e-7.woody.9
heimdal-servers - 0.4e-7.woody.9
heimdal-servers-x - 0.4e-7.woody.9
libasn1-5-heimdal - 0.4e-7.woody.9
libcomerr1-heimdal - 0.4e-7.woody.9
libgssapi1-heimdal - 0.4e-7.woody.9
libhdb7-heimdal - 0.4e-7.woody.9
libkadm5clnt4-heimdal - 0.4e-7.woody.9
libkadm5srv7-heimdal - 0.4e-7.woody.9
libkafs0-heimdal - 0.4e-7.woody.9
libkrb5-17-heimdal - 0.4e-7.woody.9
libotp0-heimdal - 0.4e-7.woody.9
libroken9-heimdal - 0.4e-7.woody.9
libsl0-heimdal - 0.4e-7.woody.9
libss0-heimdal - 0.4e-7.woody.9

http://www.debian.org/security/dsa-504/

Источник: CVE
Наименование: CVE-2004-0434
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0434