Novell Open Enterprise Server: MITKRB5-SA-2010-007 [CVE-2010-1323 CVE-2010-1324 CVE-2010-4020 CVE-2010-4021]

As per the disclosed facts in MITKRB5-SA-2010-007 the following services in OES2 are vulnerable if enabled:

    * Novell KDC (NKDC)
    * Kerberos functionality in Domain Services for Windows (DSfW)
    * SASL-GSSAPI LDAP login method

The vulnerabilies have been addressed addressed in January 2010 updates to the following versions:

• OES2 SP0
• OES2 SP1 (ix86)
• OES2 SP1 (x86_64)
• OES2 SP2 (ix86)
• OES2 SP2 (x86_64)

NKDC was discontinued as of OES2 SP1
Domain Services for Windows (DSfW) is available in OES2 SP1 and later
OES2 SP3 included the fixes