CVE-2019-3467: falha em Debian Edu
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.5%
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.
Produtos afetados
Debian · Debian EduReferências
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459https://lists.debian.org/debian-lts-announce/2019/12/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2020/01/msg00012.htmlhttps://seclists.org/bugtraq/2019/Dec/34https://seclists.org/bugtraq/2019/Dec/44https://security-tracker.debian.org/tracker/CVE-2019-3467https://usn.ubuntu.com/4530-1/https://www.debian.org/security/2019/dsa-4589https://www.debian.org/security/2019/dsa-4595