remote denial of service in heimdal

2006-02-2413:58:32

lists.opensuse.org

0.855 High

EPSS

Percentile

98.2%

JSON

Heimdal is a Kerberos 5 implementation from the Royal Institut of Techno- logy in Stockholm. This update fixes two bugs in heimdal. The first one occurs in the rsh daemon and allows an authenticated malicious user to gain ownership of files that belong to other users (CVE-2006-0582). The second bug affects the telnet server and can be used to crash the server before authentication happens. It is even a denial-of-service attack when the telnetd is started via inetd because inetd stops forking the daemon when it forks too fast (CVE-2006-0677).

Solution

There is no work-around known.

OSVersionArchitecturePackageVersionFilename
openSUSE9.2x86_64heimdal-lib-32bit< 9.2-200602211039heimdal-lib-32bit-9.2-200602211039.x86_64.rpm
openSUSE9.2x86_64heimdal< 0.6.2-8.6heimdal-0.6.2-8.6.x86_64.rpm
openSUSE9.1i586heimdal-devel< 0.6.1rc3-55.21heimdal-devel-0.6.1rc3-55.21.i586.rpm
openSUSE9.2i586heimdal-lib< 0.6.2-8.6heimdal-lib-0.6.2-8.6.i586.rpm
openSUSE9.2i586heimdal< 0.6.2-8.6heimdal-0.6.2-8.6.i586.rpm
openSUSE9.1x86_64heimdal-devel< 0.6.1rc3-55.21heimdal-devel-0.6.1rc3-55.21.x86_64.rpm
openSUSE9.1i586heimdal-lib-32bit< 9.1-200602210606heimdal-lib-32bit-9.1-200602210606.i586.rpm
openSUSE9.1x86_64heimdal< 0.6.1rc3-55.21heimdal-0.6.1rc3-55.21.x86_64.rpm
openSUSE9.1i586heimdal-lib< 0.6.1rc3-55.21heimdal-lib-0.6.1rc3-55.21.i586.rpm
openSUSE9.1x86_64heimdal-lib< 0.6.1rc3-55.21heimdal-lib-0.6.1rc3-55.21.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	9.2	x86_64	heimdal-lib-32bit	< 9.2-200602211039	heimdal-lib-32bit-9.2-200602211039.x86_64.rpm
openSUSE	9.2	x86_64	heimdal	< 0.6.2-8.6	heimdal-0.6.2-8.6.x86_64.rpm
openSUSE	9.1	i586	heimdal-devel	< 0.6.1rc3-55.21	heimdal-devel-0.6.1rc3-55.21.i586.rpm
openSUSE	9.2	i586	heimdal-lib	< 0.6.2-8.6	heimdal-lib-0.6.2-8.6.i586.rpm
openSUSE	9.2	i586	heimdal	< 0.6.2-8.6	heimdal-0.6.2-8.6.i586.rpm
openSUSE	9.1	x86_64	heimdal-devel	< 0.6.1rc3-55.21	heimdal-devel-0.6.1rc3-55.21.x86_64.rpm
openSUSE	9.1	i586	heimdal-lib-32bit	< 9.1-200602210606	heimdal-lib-32bit-9.1-200602210606.i586.rpm
openSUSE	9.1	x86_64	heimdal	< 0.6.1rc3-55.21	heimdal-0.6.1rc3-55.21.x86_64.rpm
openSUSE	9.1	i586	heimdal-lib	< 0.6.1rc3-55.21	heimdal-lib-0.6.1rc3-55.21.i586.rpm
openSUSE	9.1	x86_64	heimdal-lib	< 0.6.1rc3-55.21	heimdal-lib-0.6.1rc3-55.21.x86_64.rpm