Fedora Update for sssd FEDORA-2010-0413

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora SSSD绕过Kerberos认证漏洞

BUGTRAQ ID: 37747 CVE ID: CVE-2010-0014 系统安全服务守护程序（SSSD）用于在Fedora系统中提供一些安全服务。 在配置了krb5 authprovider但KDC不可到达的情况下，SSSD允许物理接触的本地用户通过任意口令认证到使用Kerberos TGT工作站上的受到锁屏保护的程序。 Fedora SSSD 1.0.1 厂商补丁： Fedora ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1...

Design/Logic Flaw

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

CVE-2010-0014 affects the System Security Services Daemon (SSSD) with the krb5 auth_provider when the KDC is unreachable. According to Fedora/OpenVAS disclosures, vulnerable component is SSSD (sssd) and updates were released as Fedora advisories FEDORA-2010-0413, FEDORA-2010-0451, and package sss...

Fedora SSSD Kerberos验证安全绕过漏洞

Bugraq ID: 37747 CVE ID：CVE-2010-0014 Fedora是一款基于linux内核的发行版本。 当sssd配置使用Kerberos进行校验时在域段中设置authprovider = krb5，在如下条件下可接收任意密码作为合法密码使用： -系统离线的情况下，如KDC配置的krb5kdcip选项没有启用到。 -尝试验证的用户在Kerberos realm中拥有一个合法TGT，并且在凭据缓存文件中设置了krb5realm选项。 RedHat SSSD 1.0.0-2 RedHat SSSD 1.0.0-1 RedHat SSSD 0.99.1-1 RedHat...

[SECURITY] Fedora 11 Update: sssd-1.0.1-1.fc11

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 12 Update: sssd-1.0.1-1.fc12

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Fedora Core 11 FEDORA-2009-8101 (sssd)

The remote host is missing an update to sssd announced via advisory FEDORA-2009-8101. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

Design/Logic Flaw

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

CVE-2009-2410

The CVE-2009-2410 issue affects sssd 0.4.1, where the local_handler_callback in server/responder/pam/pam_LOCAL_domain.c mishandles blank-password accounts in the SSSD BE database. This allows context-dependent attackers to obtain access by supplying the account username and an arbitrary password ...

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

CVE-2009-2410

The localhandlercallback function in server/responder/pam/pamLOCALdomain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password...

Fedora 11 : sssd-0.4.1-3.fc11 (2009-8101)

If a user was added to the SSSD BE database without setting a password, the user could ssh to the SSSD configured client and enter any password to gain access. This update resolves this issue so users with no password set are no longer able to login. Note that Tenable Network Security has extract...

Fedora SSSD BE数据库无密码认证绕过漏洞

Bugraq ID: 35868 CVE ID：CVE-2009-2410 Fedora是一款基于linux内核的发行版本。 Fedora SSSD存在验证绕过问题，远程攻击者可以利用漏洞获得对目标系统的未授权访问。 如果用户增加到SSSD BE数据库，但没有设置密码，那么这个用户就可以通过SSH连接配置SSSD客户端机器，并无需任何密码即可访问。 RedHat SSSD 0.4.1-2 RedHat Fedora 11 厂商解决方案 用户可参考如下安全公告获得补丁信息： https://bugzilla.redhat.com/showbug.cgi?id=514057...

[SECURITY] Fedora 11 Update: sssd-0.4.1-3.fc11

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...