Not rated
CVE-2019-3467 Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config <…
Description
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Debian Edu | Versions not published |
References
- [debian-lts-announce] 20191218 [SECURITY] [DLA 2041-1] debian-edu-config security update lists.debian.org
- 20191218 [SECURITY] [DSA 4589-1] debian-edu-config security update seclists.org
- DSA-4589 www.debian.org
- bugs.debian.org bugs.debian.org
- security-tracker.debian.org security-tracker.debian.org
- bugs.debian.org bugs.debian.org
- DSA-4595 www.debian.org
- 20191229 [SECURITY] [DSA 4595-1] debian-lan-config security update seclists.org
- [debian-lts-announce] 20200115 [SECURITY] [DLA 2063-1] debian-lan-config security update lists.debian.org
- USN-4530-1 usn.ubuntu.com
Timeline
- Published
- Last modified