Skolelinux

Debian-edu-config

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2021-20001

  • EPSS 0.77%
  • Published 11.02.2022 20:15:07
  • Last modified 21.11.2024 05:45:46

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

7.8

CVE-2019-3467

Exploit
  • EPSS 0.09%
  • Published 23.12.2019 19:15:11
  • Last modified 21.11.2024 04:42:06

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.