EulerOS Virtualization 2.5.3 krb5 vulnerabilities with LDAP Kerberos databas
Reporter | Title | Published | Views | Family All 103 |
---|---|---|---|---|
![]() | Low: krb5 | 23 Jan 201918:58 | – | amazon |
![]() | Low: krb5 | 13 Dec 201820:20 | – | amazon |
![]() | [ASA-201806-3] krb5: insufficient validation | 5 Jun 201800:00 | – | archlinux |
![]() | krb5, libkadm5 security update | 15 Nov 201818:48 | – | centos |
![]() | Amazon Linux AMI : krb5 (ALAS-2018-1129) | 25 Jan 201900:00 | – | nessus |
![]() | EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2018-1425) | 28 Dec 201800:00 | – | nessus |
![]() | openSUSE Security Update : krb5 (openSUSE-2019-139) | 6 Feb 201900:00 | – | nessus |
![]() | Amazon Linux 2 : krb5 (ALAS-2018-1129) | 20 Dec 201800:00 | – | nessus |
![]() | Scientific Linux Security Update : krb5 on SL7.x x86_64 (20181030) | 27 Nov 201800:00 | – | nessus |
![]() | openSUSE Security Update : krb5 (openSUSE-2018-328) | 2 Apr 201800:00 | – | nessus |
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(123870);
script_version("1.8");
script_set_attribute(attribute:"plugin_modification_date", value:"2024/06/04");
script_cve_id("CVE-2018-5729", "CVE-2018-5730");
script_name(english:"EulerOS Virtualization 2.5.3 : krb5 (EulerOS-SA-2019-1184)");
script_set_attribute(attribute:"synopsis", value:
"The remote EulerOS Virtualization host is missing multiple security
updates.");
script_set_attribute(attribute:"description", value:
"According to the versions of the krb5 packages installed, the EulerOS
Virtualization installation on the remote host is affected by the
following vulnerabilities :
- MIT krb5 1.6 or later allows an authenticated kadmin
with permission to add principals to an LDAP Kerberos
database to cause a denial of service (NULL pointer
dereference) or bypass a DN container check by
supplying tagged data that is internal to the database
module.i1/4^CVE-2018-5729i1/4%0
- MIT krb5 1.6 or later allows an authenticated kadmin
with permission to add principals to an LDAP Kerberos
database to circumvent a DN containership check by
supplying both a 'linkdn' and 'containerdn' database
argument, or by supplying a DN string which is a left
extension of a container DN string but is not
hierarchically within the container
DN.i1/4^CVE-2018-5730i1/4%0
Note that Tenable Network Security has extracted the preceding
description block directly from the EulerOS security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
# https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2019-1184
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?620e9fd8");
script_set_attribute(attribute:"solution", value:
"Update the affected krb5 packages.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5729");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"patch_publication_date", value:"2019/04/02");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/04/09");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:krb5-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:krb5-libs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:krb5-pkinit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:krb5-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:krb5-workstation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:libkadm5");
script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:uvp:2.5.3");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Huawei Local Security Checks");
script_copyright(english:"This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/uvp_version");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/EulerOS/release");
if (isnull(release) || release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
uvp = get_kb_item("Host/EulerOS/uvp_version");
if (uvp != "2.5.3") audit(AUDIT_OS_NOT, "EulerOS Virtualization 2.5.3");
if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu);
flag = 0;
pkgs = ["krb5-devel-1.15.1-34",
"krb5-libs-1.15.1-34",
"krb5-pkinit-1.15.1-34",
"krb5-server-1.15.1-34",
"krb5-workstation-1.15.1-34",
"libkadm5-1.15.1-34"];
foreach (pkg in pkgs)
if (rpm_check(release:"EulerOS-2.0", reference:pkg)) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "krb5");
}
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo