ISOMAN

CVE

CVE-2019-3467

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
  2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
  3. https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
  4. https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
  5. https://seclists.org/bugtraq/2019/Dec/34
  6. https://seclists.org/bugtraq/2019/Dec/44
  7. https://security-tracker.debian.org/tracker/CVE-2019-3467
  8. https://usn.ubuntu.com/4530-1/
  9. https://www.debian.org/security/2019/dsa-4589
  10. https://www.debian.org/security/2019/dsa-4595
  11. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
  12. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
  13. https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
  14. https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
  15. https://seclists.org/bugtraq/2019/Dec/34
  16. https://seclists.org/bugtraq/2019/Dec/44
  17. https://security-tracker.debian.org/tracker/CVE-2019-3467
  18. https://usn.ubuntu.com/4530-1/
  19. https://www.debian.org/security/2019/dsa-4589
  20. https://www.debian.org/security/2019/dsa-4595