1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
Candidate: CVE-2015-3206
PublicDate: 2017-08-25
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3206
Description:
The checkPassword function in python-kerberos does not authenticate the KDC
it attempts to communicate with, which allows remote attackers to cause a
denial of service (bad response), or have other unspecified impact by
performing a man-in-the-middle attack.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
Patches_pykerberos:
upstream_pykerberos: needs-triage
precise_pykerberos: released (1.1+svn4895-1+deb6u1build0.12.04.1)
precise/esm_pykerberos: DNE (precise was released [1.1+svn4895-1+deb6u1build0.12.04.1])
trusty_pykerberos: needs-triage
utopic_pykerberos: ignored (reached end-of-life)
vivid_pykerberos: ignored (reached end-of-life)
vivid/stable-phone-overlay_pykerberos: DNE
vivid/ubuntu-core_pykerberos: DNE
wily_pykerberos: ignored (reached end-of-life)
xenial_pykerberos: needs-triage
yakkety_pykerberos: ignored (reached end-of-life)
zesty_pykerberos: needs-triage
devel_pykerberos: needs-triage
|