Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 12.04 ESM USN-3353-3 Moderate: Heimdal Network Access Threat

ubuntu
Calendar Grey July 24, 2017
Dist Ubuntu Esm H88
Using Heimdal on Ubuntu 12.04 ESM may expose your system to potential unauthorized network exposure. Ensure you upgrade your setup promptly to safeguard it.
Heimdal could allow unintended access to network services.

Summary

Heimdal could allow unintended access to network services.

Software Description:

- heimdal: Heimdal Kerberos Network Authentication Protocol

Details:

USN-3353-1 fixed a vulnerability in Heimdal. This update provides

the corresponding updade for Ubuntu 12.04 ESM.

Original advisory details:

 Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered

 that Heimdal clients incorrectly trusted unauthenticated portions

 of Kerberos tickets. A remote attacker could use this to impersonate

 trusted network services or perform other attacks.

Topics%20covered

Topics Covered

security advisory moderate kerberos authentication ubuntu heimdal network access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  libkrb5-26-heimdal              1.6~git20120311.dfsg.1-2ubuntu0.2

After a standard system update you need to restart any applications
using Heimdal libraries to make all the necessary changes.

References

 

  https://ubuntu.com/security/notices/USN-3353-1

  CVE-2017-11103

July 24, 2017

Topics%20covered

Topics Covered

security advisory moderate kerberos authentication ubuntu heimdal network access

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here