advisories/10090.adv

ID: MGASA-2013-0161
pubtime: 1370521473
type: security
src:
  2:
   core:
     - krb5-1.9.2-2.6.mga2
  3:
   core:
     - krb5-1.11.1-1.2.mga3
CVE:
  - CVE-2002-2443
subject: Updated krb5 packages fix security vulnerability
description: |
  The kpasswd service provided by kadmind was vulnerable to a UDP
  ping-pong attack (CVE-2002-2443).
references:
 - https://bugzilla.redhat.com/show_bug.cgi?id=962531
 - http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2013:166/
1	ID: MGASA-2013-0161
2	pubtime: 1370521473
3	type: security
4	src:
5	2:
6	core:
7	- krb5-1.9.2-2.6.mga2
8	3:
9	core:
10	- krb5-1.11.1-1.2.mga3
11	CVE:
12	- CVE-2002-2443
13	subject: Updated krb5 packages fix security vulnerability
14	description: \|
15	The kpasswd service provided by kadmind was vulnerable to a UDP
16	ping-pong attack (CVE-2002-2443).
17	references:
18	- https://bugzilla.redhat.com/show_bug.cgi?id=962531
19	- http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2013:166/