← Back

Debian Edu Config

debian-edu-config

Vendor: Skolelinux • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-20001
2Debian
Skolelinux
2Debian Edu Config
Debian Linux
Nov 21, 2024
Feb 11, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privile...Show more
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.Show less
CVE-2019-3467
3Canonical
DebianSkolelinux
4Debian Edu Config
Debian Lan ConfigDebian Linux+1 more
Nov 21, 2024
Dec 23, 2019
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for o...Show more
Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.Show less