| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20070115174205.GD5893@piware.de>
Date: Mon, 15 Jan 2007 18:42:05 +0100
From: Martin Pitt <martin.pitt@...onical.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-408-1] krb5 vulnerability
===========================================================
Ubuntu Security Notice USN-408-1 January 15, 2007
krb5 vulnerability
CVE-2006-6143
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 6.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
libkadm55 1.4.3-5ubuntu0.2
libkrb53 1.4.3-5ubuntu0.2
Ubuntu 6.10:
libkadm55 1.4.3-9ubuntu1.1
libkrb53 1.4.3-9ubuntu1.1
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
The server-side portion of Kerberos' RPC library had a memory
management flaw which allowed users of that library to call a function
pointer located in unallocated memory. By doing specially crafted
calls to the kadmind server, a remote attacker could exploit this to
execute arbitrary code with root privileges on the target computer.
Updated packages for Ubuntu 6.06 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3-5ubuntu0.2.diff.gz
Size/MD5: 1447550 546659a7ce8758c26c33d0241adb992d
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3-5ubuntu0.2.dsc
Size/MD5: 848 ed669b2e38c5b3b6701401b99bbdb3cb
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3.orig.tar.gz
Size/MD5: 7279788 43fe621ecb849a83ee014dfb856c54af
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.4.3-5ubuntu0.2_all.deb
Size/MD5: 852734 748a61c88e96abcc2fd922acdafbd56c
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 79686 a56316c071cbdae9f33b10166e204340
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 222738 173b8846edc4d84b0880b293ebd819f8
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 59876 11c96393564f5422e884cda60671688d
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 134570 c2fa98268d5c486988eae91040441720
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 84774 7dc407371c107d79c69ffe054f702ba7
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 67044 4a01011a78cf0c299df6b36384c0950b
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 129430 2acabc3bcb9323fa28a69e306694a1ec
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 190294 a4044fce177ca61f9b24ff9515443e5f
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 768212 bba4e4f35f90a58177f14d35d9fccf1e
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-5ubuntu0.2_amd64.deb
Size/MD5: 425220 e16e7b2709af4fb8a88a0819cdfc1a40
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 71660 d38e87ecea34868e1dac394b9047c382
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 186752 12424ad58c808a4867f0db0d014a34ec
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 53844 3aa5f6a9ae2cb49659a0577ea972d0af
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 121068 9a1fcd42b91849f0a4ce3c1614c3dbb9
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 75438 9b264a66dff08d0206370a43058687d1
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 58204 6e89a58b9d435c6e1422537a18da2dc1
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 118528 82f62332c5bae9177ce1f356b824279e
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 165130 0968da19d0bdac05e716825ba045f5e5
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 646560 89ccbd05cda4887245d7d5c5cd77d383
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-5ubuntu0.2_i386.deb
Size/MD5: 380650 8a8e6bebd4955809ef62a27cc7eb8918
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 79712 119d48198050bd5e24c711c895770bf0
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 220080 3025e485a43fd6a67c6d7716f1efad63
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 59084 97104b0dcfc3a4dacd5c1334766c488b
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 135552 b1c5a4334633412e8c64d808b4a30280
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 84632 b7a70d1cb0513523911248231bbcca82
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 65420 9300e4d62e4dedad6ac85647fe157ee2
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 134396 f07964b5364af26ac18bc4c37ff71e3f
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 177082 8488709500858a66f07183a193a249e7
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 751382 96e57442a0caa1e574f0581327fc9e1a
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-5ubuntu0.2_powerpc.deb
Size/MD5: 395444 b672282f98601ebe9340f251d7e2dd46
sparc architecture (Sun SPARC/UltraSPARC)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 72292 ed56430a6017fe52fd34e8724ff5892d
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 196928 2dff67f37591eede7be792c836028920
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 55818 1de2f224962fd6e7f9a5a642995a2fb6
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 123914 871a22e98608033db8dbc3e85d18e430
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 76454 c8f134cee518c209e4f068d59e7bc90e
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 61752 e15353f761ff1b052ff790c3b22d9f03
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 120102 a72b86d5911ebf7d90454e20a5d3d6a7
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 164630 2ba7eb220cee2ef90c433520dc22bd1d
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 677878 53436fc167794aa6c7e4538156b279e4
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-5ubuntu0.2_sparc.deb
Size/MD5: 368236 8cfe1fb1b04f054211103b96bd85d4d0
Updated packages for Ubuntu 6.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3-9ubuntu1.1.diff.gz
Size/MD5: 1468259 a89554ee72ae46193497b5fdb86359e5
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3-9ubuntu1.1.dsc
Size/MD5: 883 92b415a7e46614bc10a6fad2971a13a4
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5_1.4.3.orig.tar.gz
Size/MD5: 7279788 43fe621ecb849a83ee014dfb856c54af
Architecture independent packages:
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.4.3-9ubuntu1.1_all.deb
Size/MD5: 853430 3958e9a508ef75081c289378ee06cb5d
amd64 architecture (Athlon64, Opteron, EM64T Xeon)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 81062 5e7b14c23de60189762b3776991256a3
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 223934 6cbf0f868012e01518617369f4c09d78
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 61134 c2420e53a8369ef1fb7150d8a486dd3c
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 138648 38ffe1ee542695b7e7110f752b02a735
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 86946 da6f24f2da9e84b2e13c0a296c8bdfcb
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 67556 711861722d5ef9e31d6d641076574df6
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 130170 53bf2f36db32694986426840efce7a63
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 190180 27a2f0cf1711ddf7498b20073363c5f6
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 1072552 d9f4df032a6d0b24d4b948cdc2a17ec3
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 771828 8a490a2198a58ccea514e43ab68bce88
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-9ubuntu1.1_amd64.deb
Size/MD5: 427562 f60e228b07f072ee64e66d16b01c80c9
i386 architecture (x86 compatible Intel/AMD)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 74768 07466ce7134858695cd2608f7d916bc9
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 195996 77d746677df270dc89773c13f4231e98
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 56642 33f6895466f028e4f7e60fe6d0102d7b
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 128984 d57c3ae641ffc63cde21557c3db9355c
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 79602 6be865799bcf85edb35c541df35b9245
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 61366 e9c4b39d8228118d03d5df02123e437d
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 121716 588addedfb49a64c09a8517740d039d9
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 172370 b6674bf633bf623d54d53d8ee57120e5
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 1024338 53cef35e866ba9bfa14ebb7727b10c9d
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 672520 7c1313e3eb84a448479af34eda9a0233
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-9ubuntu1.1_i386.deb
Size/MD5: 403646 b30ac3ba3dc11650ef9a74b5b1d9368a
powerpc architecture (Apple Macintosh G3/G4/G5)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 81626 eb56ed7461f47af49023f2027d71a249
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 222676 f847921d673ba513a11b2e4da26c6589
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 61324 94d69c98e2439ead3b38757fb6503917
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 140824 a3a2c75ca459aadf29db4af247832cac
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 86812 8747cbb5e22b1611d0f35d413a29dfb8
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 66622 e03d52dd334c788d3fb7583660ac25af
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 136342 0048a761afaabaffb847273c88cb7758
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 179554 59ca8bdf4afa0ea09432aaa2e53facf7
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 1076132 98f942e3252e3f377cd24c03dfae7120
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 757874 00cde304e78bdd85ca75454ae31f9056
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-9ubuntu1.1_powerpc.deb
Size/MD5: 398636 15cd61e388f2e658709577c6c17ed9f4
sparc architecture (Sun SPARC/UltraSPARC)
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-server_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 74648 a9d42678fb3d7d508c087ae7eb075eec
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 203198 2aeac236c8864c757a55870190918302
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 58498 22079ad35df8ceea0857319eb533ee35
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 129158 a5b36aeb90baba94d569f41d21f16548
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 79926 d889cf2987c8c48a6aef9b566ad14238
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 63040 6e9f3b3ad95536ee494d73e8ee3d252a
http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-user_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 122238 bd59626426b7690742520d2151b58a3c
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm55_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 166480 fd69c12e642a168d39ce209c1647d433
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 957280 de94391f1d289fbe3c7639f8ca8cf303
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 684606 511b01e003f876bde73badddeda105ab
http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb53_1.4.3-9ubuntu1.1_sparc.deb
Size/MD5: 373600 66c24f51433ff5ce4670bc91f04a6187
Download attachment "signature.asc" of type "application/pgp-signature" (190 bytes)
Powered by blists - more mailing lists