Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2019-3467
PUBLISHED
More InfoOfficial Page
Assigner-debian
Assigner Org ID-79363d38-fa19-49d1-9214-5f28da3f3ac5
View Known Exploited Vulnerability (KEV) details
Published At-23 Dec, 2019 | 18:04
Updated At-04 Aug, 2024 | 19:12
Rejected At-
▼CVE Numbering Authority (CNA)

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.

Affected Products
Vendor
Debian GNU/LinuxDebian
Product
Debian Edu
Versions
Affected
  • all versions < 2.11.10
Problem Types
TypeCWE IDDescription
textN/Atoo permissive access control settings
Type: text
CWE ID: N/A
Description: too permissive access control settings
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
mailing-list
x_refsource_MLIST
https://seclists.org/bugtraq/2019/Dec/34
mailing-list
x_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4589
vendor-advisory
x_refsource_DEBIAN
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
x_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2019-3467
x_refsource_CONFIRM
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
x_refsource_CONFIRM
https://www.debian.org/security/2019/dsa-4595
vendor-advisory
x_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Dec/44
mailing-list
x_refsource_BUGTRAQ
https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
mailing-list
x_refsource_MLIST
https://usn.ubuntu.com/4530-1/
vendor-advisory
x_refsource_UBUNTU
Hyperlink: https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: https://seclists.org/bugtraq/2019/Dec/34
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: https://www.debian.org/security/2019/dsa-4589
Resource:
vendor-advisory
x_refsource_DEBIAN
Hyperlink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
Resource:
x_refsource_MISC
Hyperlink: https://security-tracker.debian.org/tracker/CVE-2019-3467
Resource:
x_refsource_CONFIRM
Hyperlink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
Resource:
x_refsource_CONFIRM
Hyperlink: https://www.debian.org/security/2019/dsa-4595
Resource:
vendor-advisory
x_refsource_DEBIAN
Hyperlink: https://seclists.org/bugtraq/2019/Dec/44
Resource:
mailing-list
x_refsource_BUGTRAQ
Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: https://usn.ubuntu.com/4530-1/
Resource:
vendor-advisory
x_refsource_UBUNTU
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
mailing-list
x_refsource_MLIST
x_transferred
https://seclists.org/bugtraq/2019/Dec/34
mailing-list
x_refsource_BUGTRAQ
x_transferred
https://www.debian.org/security/2019/dsa-4589
vendor-advisory
x_refsource_DEBIAN
x_transferred
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
x_refsource_MISC
x_transferred
https://security-tracker.debian.org/tracker/CVE-2019-3467
x_refsource_CONFIRM
x_transferred
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
x_refsource_CONFIRM
x_transferred
https://www.debian.org/security/2019/dsa-4595
vendor-advisory
x_refsource_DEBIAN
x_transferred
https://seclists.org/bugtraq/2019/Dec/44
mailing-list
x_refsource_BUGTRAQ
x_transferred
https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
mailing-list
x_refsource_MLIST
x_transferred
https://usn.ubuntu.com/4530-1/
vendor-advisory
x_refsource_UBUNTU
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: https://seclists.org/bugtraq/2019/Dec/34
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: https://www.debian.org/security/2019/dsa-4589
Resource:
vendor-advisory
x_refsource_DEBIAN
x_transferred
Hyperlink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://security-tracker.debian.org/tracker/CVE-2019-3467
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://www.debian.org/security/2019/dsa-4595
Resource:
vendor-advisory
x_refsource_DEBIAN
x_transferred
Hyperlink: https://seclists.org/bugtraq/2019/Dec/44
Resource:
mailing-list
x_refsource_BUGTRAQ
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: https://usn.ubuntu.com/4530-1/
Resource:
vendor-advisory
x_refsource_UBUNTU
x_transferred
Details not found