Red Hat Enterprise IPA Master Kerberos Password Information Disclosure Vulnerability

Bugtraq ID:	31111
Class:	Design Error
CVE:	CVE-2008-3274
Remote:	Yes
Local:	No
Published:	Sep 10 2008 12:00AM
Updated:	Apr 13 2015 09:58PM
Credit:	Reported by the vendor
Vulnerable:	Redhat Enterprise IPA 1 for RHEL 5 Server 0
Not Vulnerable:

Red Hat Enterprise IPA Master Kerberos Password Information Disclosure Vulnerability

Red Hat Enterprise IPA is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

Red Hat Enterprise IPA version 1 for Red Hat Enterprise Linux 5 Server is vulnerable.

Red Hat Enterprise IPA Master Kerberos Password Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Red Hat Enterprise IPA Master Kerberos Password Information Disclosure Vulnerability

Solution:
The vendor has released a patch and an advisory. Please see the references for more information.

Red Hat Enterprise IPA Master Kerberos Password Information Disclosure Vulnerability

References:

• Red Hat Enterprise IPA Homepage (Red Hat)