CVE-2016-5414

FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...

CVE-2016-5414

FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...

CVE-2016-5414

CVE-2016-5414 affects FreeIPA 4.4.0. The vulnerability lets a remote attacker request an arbitrary SAN name for services due to improper SAN handling/validation. The description only states the exposure without detailing exploitation steps, impact scope, or fixes. No remediation is provided in th...

EulerOS 2.0 SP1 : ipa (EulerOS-SA-2016-1042)

According to the version of the ipa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The certrevoke command in FreeIPA does not check for the 'revoke certificate' permission, which allows remote authenticated users to revoke arbitrary...

Fedora Update for freeipa FEDORA-2017-98f85533f0

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : freeipa (2017-98f85533f0)

Fixed CVE 2017-2590: freeipa: ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean a...

Security fix for the ALT Linux 8 package freeipa version 4.3.2-alt6

Jan. 23, 2017 Mikhail Efremov 4.3.2-alt6 - client: Require nss-utils closes: 33031. - Patches from upstream: + Fixed CVE-2016-7030. + Fixed CVE-2016-9575...

Fedora Update for freeipa FEDORA-2016-d337166907

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : freeipa (2016-d337166907)

Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy ---- - Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - Fixes 1370493 -...

Red Hat FreeIPA Insecure File Permissions Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. An insecure file permission vulnerability exists in Red Hat FreeIPA. An attacker could...

Fedora 25 : freeipa (2016-ca1d1e1dc1)

Rebase to upstream 4.4.3: http://www.freeipa.org/page/Releases/4.4.3 ---- - Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy Note that Tenable Network Security...

Fedora Update for freeipa FEDORA-2016-ca1d1e1dc1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat FreeIPA Denial of Service Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. A denial of service vulnerability exists in FreeIPA. An attacker could exploit the...

Fedora Update for freeipa FEDORA-2016-f56c765d67

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : 1:tomcat (2016-38e5b05260) (httpoxy)

This updates includes a rebase from tomcat 8.0.36 up to 8.0.38 which resolves multiple CVEs and a problem that 8.0.37 introduces to freeipa : - rhbz1375581 - CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - rhbz1390532 - CVE-2016-0762 CVE-2016-50...

Fedora 25 : freeipa (2016-f56c765d67)

Security fix for CVE-2016-5404 Along with second revision of 4.3.2 update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 24 : 1:tomcat (2016-c1b01b9278) (httpoxy)

This updates includes a rebase from tomcat 8.0.36 up to 8.0.38 which resolves multiple CVEs and a problem that 8.0.37 introduces to freeipa : - rhbz1375581 - CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header - rhbz1390532 - CVE-2016-0762 CVE-2016-50...

CVE-2016-5404

The certrevoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission...

CVE-2016-5404

The certrevoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission...

DEBIAN-CVE-2016-5404

The certrevoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission...