CVE

Id
60146  
CVE No.
CVE-2013-0199  
Status
Candidate  
Description
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607120 60146 CVE-2013-0199 CONFIRM:http://www.freeipa.org/page/CVE-2013-0199  View
607121 60146 CVE-2013-0199 CONFIRM:http://www.freeipa.org/page/Releases/3.1.2  View
607122 60146 CVE-2013-0199 BID:57542  View
607123 60146 CVE-2013-0199 URL:http://www.securityfocus.com/bid/57542  View
607124 60146 CVE-2013-0199 OSVDB:89539  View
607125 60146 CVE-2013-0199 URL:http://osvdb.org/89539  View
607126 60146 CVE-2013-0199 XF:freeipa-crossrealm-info-disc(81486)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24983 JVNDB-2013-006558 ownCloud の settings/personal.php における任意の PHP コードを実行される脆弱性 ownCloud の settings/personal.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2013-0204 60146 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006558.html  View