The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2154 advisory.

    - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
      - Bug 1144498 ('Fix the race condition in the libkrb5 replay cache')
      - Bug 1163402 ('kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64')
      - Bug 1185770 ('Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c')
      - Bug 1204211 ('CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other')
    - fix for CVE-2015-2694 (#1218020) 'requires_preauth bypass       in PKINIT-enabled KDC'.
      In MIT krb5 1.12 and later, when the KDC is configured with       PKINIT support, an unauthenticated remote attacker can       bypass the requires_preauth flag on a client principal and       obtain a ciphertext encrypted in the principal's long-term       key.  This ciphertext could be used to conduct an off-line       dictionary attack against the user's password.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : krb5 (ELSA-2015-2154)

high Nessus Plugin ID 87026

Version 1.14