tocsin

Debian/krb5: unknown

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated use

Action: Upgrade krb5 to 1.12.1+dfsg-16 or later.

Affected

introducedfixedlast affected
01.12.1+dfsg-16-

Fixed versions

1.12.1+dfsg-16

Sources

published · modified · JSON