[SECURITY] Fedora 13 Update: sssd-1.2.2-21.fc13

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 12 Update: sssd-1.2.2-20.fc12

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 14 Update: sssd-1.3.0-30.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Fedora 14 : sssd-1.3.0-30.fc14 (2010-13474)

CVE-2010-2940 - SSSD allows null password entry to authenticate against LDAP Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

Authentication flaw

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

CVE-2010-2940

CVE-2010-2940 affects System Security Services Daemon (SSSD) 1.3.0. When LDAP authentication with anonymous bind is enabled, the auth_send function in providers/ldap/ldap_auth.c allows remote attackers to bypass pam_authenticate by supplying an empty password. The vulnerability enables partial co...

Fedora 12 : sssd-1.0.1-1.fc12 (2010-0413)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 11 : sssd-1.0.1-1.fc11 (2010-0451)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora Update for sssd FEDORA-2010-0451

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2010-0451 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sssd FEDORA-2010-0413

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2010-0413 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for sssd FEDORA-2010-0451

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for sssd FEDORA-2010-0413

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora SSSD绕过Kerberos认证漏洞

BUGTRAQ ID: 37747 CVE ID: CVE-2010-0014 系统安全服务守护程序（SSSD）用于在Fedora系统中提供一些安全服务。 在配置了krb5 authprovider但KDC不可到达的情况下，SSSD允许物理接触的本地用户通过任意口令认证到使用Kerberos TGT工作站上的受到锁屏保护的程序。 Fedora SSSD 1.0.1 厂商补丁： Fedora ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1...

Design/Logic Flaw

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...