PT-2004-1525 · Heimdal · Heimdal

Publicado 2004-04-06 · Atualizado 2017-07-11 · CVE-2004-0371

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Heimdal versions 0.5.x through 0.5.2 Heimdal versions 0.6.x through 0.6.0

Description The issue is related to improper consistency checks for cross-realm requests, allowing remote attackers with control of a realm to impersonate others in the cross-realm trust path.

Recommendations For Heimdal versions 0.5.x through 0.5.2, update to version 0.5.3 to resolve the issue. For Heimdal versions 0.6.x through 0.6.0, update to version 0.6.1 to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0371

DSA-476

Produtos afetados

Heimdal

Referências · 10

• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15701 · Nota
• http://pdc.kth.se/heimdal/advisory/2004-04-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0371 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2004-0371 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-476 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0371 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0371 · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200404-09.xml · Aviso do Fabricante