https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T06:19:40.890139+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-3467 CVE-2019-3467 2026-10-05T06:19:40.895276+00:00

Affected: Debian Edu

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.

 https://vulnerability.circl.lu/vuln/usn-4530-1 USN-4530-1 — debian-lan-config vulnerabilities 2026-10-05T06:19:40.895390+00:00

Affected: Ubuntu:18.04:LTS: debian-lan-config

Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs for the Kerberos admin server. A local attacker could possibly use this issue to change the passwords of other users, leading to root privilege escalation. (CVE-2019-3467)