Evaluator Impact

Per: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-005.txt 'AFFECTED SOFTWARE ================= * kadmind and other GSS-API server applications in all known releases of MIT krb5, up to and including krb5-1.8.1 * third-party GSS-API server applications that link link against the GSS-API library in all known releases of MIT krb5, up to and including krb5-1.8.1 * Independent implementations of the krb5 GSS-API mechanism may be vulnerable, as the underlying bug is based on plausible (but invalid) assumptions about the Kerberos protocol.'

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

References to Check Content

Identifier:

oval:org.mitre.oval:def:11604

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11604

Identifier:

oval:org.mitre.oval:def:7198

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7198

Identifier:

oval:org.mitre.oval:def:7450

Check System:

http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:

http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:7450

Change History

http://www.securityfocus.com/archive/1/511331/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/516397/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/511331/100/0/threaded [Patch]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11604 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7198 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7450 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11604 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7450 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7198 [No Types Assigned]

http://marc.info/?l=bugtraq&m=134254866602253&w=2

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html