Summary
Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs
for the Kerberos admin server. A local attacker could possibly use this
issue to change the passwords of other users, leading to root privilege
escalation. (CVE-2019-3467)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | debian-lan-config | 0.23+deb9u1build0.18.04.1 |
Vulnerabilities 1
-
Unscored —
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.2…
References
-
report
https://ubuntu.com/security/CVE-2019-3467