Published: 18/05/2015 Updated: 03/12/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

realmd allows remote malicious users to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
realmd project realmd

Synopsis Moderate: realmd security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated realmd packages that fix two security issues, several bugs, and addvarious enhancements are now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update ...

A flaw was found in the way realmd parsed certain input when writing configuration into the sssdconf or smbconf file A remote attacker could use this flaw to inject arbitrary configurations into these files via a newline character in an LDAP response ...

CWE-74 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157358.html https://bugs.freedesktop.org/show_bug.cgi?id=89207 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155862.html http://www.securityfocus.com/bid/73352 https://access.redhat.com/errata/RHSA-2015:2184 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2016-636.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-2704

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect