EUVD-2008-3262

Malware in sbrugna...

Red Hat Enterprise IPA主Kerberos密码信息泄漏漏洞

BUGTRAQ ID: 31111 CVE ID：CVE-2008-3274 CNCVE ID：CNCVE-20082358 Red Hat Enterprise IPA是一款提供集中管理识别，策略和审核的集成方案。 Red Hat Enterprise IPA安装过程存在缺陷，远程攻击者可以利用漏洞获得主kerberos密码信息。 攻击者通过匿名LDAP连接可以获得此密码信息。 注：主kerberos密码用于加密密钥，此缺陷不会导致个体密钥泄漏。 RedHat Enterprise IPA 1 for RHEL 5 Server Red Hat可参考如下补丁程序： Red Hat...

CVE-2008-3274

The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...

Important: Red Hat Security Advisory: ipa security update

Updated ipa packages that fix a security flaw are now available for Red Hat Enterprise IPA. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Enterprise IPA is an integrated solution to provide centrally-managed Identity machines, users,...