PT-2006-7545 · Heimdal+1 · Libkadm5Srv7-Heimdal+8

Martin Pitt · Published 1970-01-01 · Updated 2018-10-19 · CVE-2006-0677

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Heimdal versions 0.6.x through 0.6.5 Heimdal versions 0.7.x through 0.7.1 libasn1-6-heimdal (affected versions not specified) libkadm5srv7-heimdal (affected versions not specified) libhdb7-heimdal (affected versions not specified) libkadm5clnt4-heimdal (affected versions not specified) libkafs0-heimdal (affected versions not specified) libkrb5-17-heimdal (affected versions not specified) libgssapi1-heimdal (affected versions not specified)

Description The issue involves multiple vulnerabilities in the Heimdal package and its related libraries in the Debian GNU/Linux operating system. These vulnerabilities can lead to a disruption of protected information and can be exploited remotely. The exploitation may cause a denial of service, such as a server crash, via unknown vectors that trigger a null dereference.

Recommendations For Heimdal versions 0.6.x through 0.6.5, update to version 0.6.6 or later. For Heimdal versions 0.7.x through 0.7.1, update to version 0.7.2 or later. For libasn1-6-heimdal, libkadm5srv7-heimdal, libhdb7-heimdal, libkadm5clnt4-heimdal, libkafs0-heimdal, libkrb5-17-heimdal, and libgssapi1-heimdal, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-01354

BDU:2015-01356

BDU:2015-01357

BDU:2015-01358

BDU:2015-01359

BDU:2015-01360

BDU:2015-01361

CVE-2006-0677

DSA-977-1

Affected Products

Debian

Heimdal

Libasn1-6-Heimdal

Libgssapi1-Heimdal

Libhdb7-Heimdal

Libkadm5Clnt4-Heimdal

Libkadm5Srv7-Heimdal

Libkafs0-Heimdal

Libkrb5-17-Heimdal

References · 28

• https://bdu.fstec.ru/vul/2015-01361 · Security Note
• https://bdu.fstec.ru/vul/2015-01356 · Security Note
• https://bdu.fstec.ru/vul/2015-01357 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-0677 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0582 · Security Note
• http://ubuntu.com/usn/usn-253-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01358 · Security Note
• https://bdu.fstec.ru/vul/2015-01360 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-0677 · Security Note
• https://bdu.fstec.ru/vul/2015-01359 · Security Note
• https://bdu.fstec.ru/vul/2015-01354 · Security Note
• http://stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0677 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-0677 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0677 · Security Note