Solution
Please Install the Updated Packages.
Insight
This update of krb5 applications fixes two security issues.
CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. (This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE.)
CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd unauthorized file access problems.
Affected
krb5-appl on openSUSE 11.4, openSUSE 11.3
Severity
Classification
-
CVE CVE-2011-1526, CVE-2011-4862 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities