DEBIAN-CVE-2019-3467

Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...

PT-2019-5234 · Mit +2 · Kerberos +3

Name of the Vulnerable Software and Affected Versions: Debian-edu-config versions prior to 2.11.10 debian-lan-config versions prior to 0.26 Description: The issue is related to a security flaw in privilege management. Exploitation of this flaw can allow an attacker to gain unauthorized access to...