Summary
Wolfgang Schweer discovered that Debian-LAN configured overly permissive
ACLs for the Kerberos admin server. An authenticated user could possibly
use this issue to change the credentials of other users, leading to
privilege escalation.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | debian-lan-config | 0.21ubuntu0.16.04.1~esm1 |
Vulnerabilities 1
-
Unscored —
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.2…
References
-
report
https://ubuntu.com/security/CVE-2019-3467