CVE-2019-3467
- State
- Published
- Severity
- Not scored
- Published
- Dec 23, 2019
- Updated
- Aug 4, 2024
- Reserved
- Dec 31, 2018
Description
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Debian EduDebian |
|
References
- [debian-lts-announce] 20191218 [SECURITY] [DLA 2041-1] debian-edu-config security updatemailing-list
- 20191218 [SECURITY] [DSA 4589-1] debian-edu-config security updatemailing-list
- DSA-4589vendor-advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
- https://security-tracker.debian.org/tracker/CVE-2019-3467
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
- DSA-4595vendor-advisory
- 20191229 [SECURITY] [DSA 4595-1] debian-lan-config security updatemailing-list
- [debian-lts-announce] 20200115 [SECURITY] [DLA 2063-1] debian-lan-config security updatemailing-list
- USN-4530-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.