CVE-2000-0575

SSH 1.2.27 with Kerberos authentication stores Kerberos tickets in a file created in the user’s current directory, which could allow an attacker to sniff the ticket cache if the home directory is on NFS. The issue is discussed in CVE-2000-0575 and related sources; a remediation is to upgrade to S...

CVE-1999-1099

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user...

CVE-1999-1098

The CVE-1999-1098 entry describes a vulnerability in the BSD Telnet client that uses encryption and Kerberos 4 authentication, enabling remote attackers to decrypt the session by sniffing traffic. Reported impact is partial confidentiality loss with a CVSS v2 base score of 5.0 (Network vector, Lo...

CVE-2001-0094

CVE-2001-0094 describes a buffer overflow in the kdc_reply_cipher() of the KTH Kerberos IV library (libkrb) used by NetBSD 1.5 and FreeBSD 4.2 and earlier, enabling a local attacker to gain root privileges or cause a crash by crafting an authentication reply. Exploitation may be facilitated when ...

KTH Kerberos Telnet implementations do not strictly enforce client encryption request

Overview A vulnerability exists in the KTH Kerberos IV and Kerberos V Heimdal Telnet implementations. When a KTH Kerberos Telnet client requests data encryption and the server does not appear to support it, the client will establish the connection using no encryption. A properly located attacker...

Kerberos Telnet protocol does not adequately protect authentication and encryption options

Overview A vulnerability exists in the Telnet Authentication Option and Telnet Data Encryption Option specifications. An ordered list of authentication and encryption options sent from the server to client during negotiation is not cryptographically protected. As a result, an attacker may be able...

Несанкционированный доступ через kerberos5 su (unauthorized access)

При логине root не требуется пароль...

FreeBSD-SA-02:07.k5su

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:07 Security Advisory FreeBSD, Inc. Topic: Kerberos 5 su command uses getlogin for authorization Category: krb5, ports Module: crypto/heimdal/appl/su, heimdal Announced:...

CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

DEBIAN-CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

PT-2001-2592 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 3.0.1 Description: The issue concerns improper user authentication when Kerberos V is enabled. This could potentially allow remote attackers to login without being challenged. Recommendations: For versions prior to...

OpenSSH < 3.0.1 Multiple Flaws

According to its banner, the remote host appears to be running OpenSSH version 3.0.1 or older. Such versions are reportedly affected by multiple flaws : - Provided KerberosV is enabled disabled by default, it may be possible for an attacker to partially authenticate. - It may be possible to crash...

CVE-2001-0237

CVE-2001-0237 affects Microsoft Windows 2000 domain controllers, where the Kerberos service can leak memory when it receives certain invalid Kerberos requests, potentially exhausting memory and causing a denial of service. Affected component is the Kerberos service (KDC) on Windows 2000 domain co...

CVE-2001-0237

Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data...

CVE-1999-1296

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRBCONF environmental variable...

CVE-1999-1296

CVE-1999-1296 affects Kerberos IV compatibility libraries used by Kerberos V. A buffer overflow can be triggered by a long line in the Kerberos config file, supplied via the KRB_CONF environment variable, allowing local users to gain root privileges. The connected documents confirm the vulnerabil...

CVE-2001-1443

KTH Kerberos IV and Kerberos V Heimdal for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack...

CVE-2001-1444

The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V Heimdal, does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack...

Critical: Red Hat Security Advisory: : Updated Kerberos 5 packages now available

Updated Kerberos 5 packages are now available for Red Hat Linux 6.2, 7, and 7.1. These updates close vulnerabilities due to potential buffer overflows in the Kerberos-aware telnet server included in the krb5-workstation package. By exploiting buffer overflows in the telnet server included in the...