[SECURITY] Fedora 11 Update: sssd-1.0.1-1.fc11

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 12 Update: sssd-1.0.1-1.fc12

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

CVE-2008-3274

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

Default configuration

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

CVE-2008-3274

The CVE-2008-3274 issue affects Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1, where the default LDAP ACLs expose the krbMKey attribute to ldap:///anyone, allowing anonymous LDAP queries to leak the Kerberos master key. This is a read ACL misconfiguration that can impact confidentiality (...

CVE-2008-3274

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

Security fix for the ALT Linux 8 package freeipa version 1.1.0-3

July 23, 2008 Simo Sorce &[email protected] - 1.1.0-3 - Fix for CVE-2008-3274 - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface - Add fix for bug 453185 - Rebuild against openldap libraries, mozldap ones do not work properly - TurboGears is currently broken in rawhide...