CVE-2019-3467

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
debianCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
debiandebian-lan-config
𝑥
< 0.26
skolelinuxdebian-edu-config
𝑥
< 2.11.10
debiandebian_linux
8.0
debiandebian_linux
9.0
debiandebian_linux
10.0
canonicalubuntu_linux
18.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
debian-edu-config
bullseye
2.11.56+deb11u4
fixed
bullseye (security)
2.11.56+deb11u3
fixed
bookworm
2.12.44~deb12u1
fixed
sid
2.12.45
fixed
trixie
2.12.45
fixed
debian-lan-config
bullseye
0.28
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
debian-lan-config
noble
dne
mantic
dne
lunar
dne
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
Fixed 0.26
released
bionic
Fixed 0.23+deb9u1build0.18.04.1
released
xenial
needed
trusty
dne
Common Weakness Enumeration
References
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
https://seclists.org/bugtraq/2019/Dec/34
https://seclists.org/bugtraq/2019/Dec/44
https://security-tracker.debian.org/tracker/CVE-2019-3467
https://usn.ubuntu.com/4530-1/
https://www.debian.org/security/2019/dsa-4589
https://www.debian.org/security/2019/dsa-4595
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
https://seclists.org/bugtraq/2019/Dec/34
https://seclists.org/bugtraq/2019/Dec/44
https://security-tracker.debian.org/tracker/CVE-2019-3467
https://usn.ubuntu.com/4530-1/
https://www.debian.org/security/2019/dsa-4589
https://www.debian.org/security/2019/dsa-4595