Fedora Update for krb5 FEDORA-2010-18409

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : krb5-1.8.2-7.fc14 (2010-18409)

This update incorporates the upstream patches to correct bugs outlined in MITKRB5-SA-2010-007 CVE-2010-1323, CVE-2010-1324, and CVE-2010-4020. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

CVE-2010-1324

MIT Kerberos 5 aka krb5 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via 1 an unkeyed checksum, 2 an unkeyed PAC checksum, or 3 a KrbFastArmoredRe...

CVE-2010-1324

MIT Kerberos 5 (krb5) 1.7.x and 1.8.x up to 1.8.3 are affected by CVE-2010-1324 due to improper acceptability of checksums when verifying the req-checksum in a KrbFastArmoredReq, including unkeyed checksums and RC4-based checksums. This could allow remote attackers to forge GSS tokens, bypass sec...

CVE-2010-1324

MIT Kerberos 5 aka krb5 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via 1 an unkeyed checksum, 2 an unkeyed PAC checksum, or 3 a KrbFastArmoredRe...

Important: Red Hat Security Advisory: krb5 security and bug fix update

Updated krb5 packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2009-1324

CVE-2009-1324 concerns Mini-stream ASX to MP3 Converter 3.0.0.7, which is affected by a stack-based buffer overflow triggered by a long URI in a playlist (.m3u) file. The vulnerability allows remote attackers to potentially execute arbitrary code. Public references affirm the same issue and descr...

CVE-2009-1324

creationtimestamp| type| source ---|---|--- 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8407 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8404 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8412 2009-04-13...

CVE-2008-1324

Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1325...

CVE-2008-1324

CVE-2008-1324 affects Travelsized CMS 0.4.1. The vulnerability is a directory-traversal flaw in index.php allowing remote attackers to include and execute arbitrary local files via a .. in the page_id and language parameters. This is supported by the NVD description and related entries that refer...

CVE-2008-1324

creationtimestamp| type| source ---|---|--- 2008-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31388...

Debian DSA-1324-1 : hiki - missing input sanitising

Kazuhiro Nishiyama found a vulnerability in hiki, a Wiki engine written in Ruby, which could allow a remote attacker to delete arbitrary files which are writable to the Hiki user, via a specially crafted session parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

CVE-2003-1324

The CVE-2003-1324 issue concerns Elm ME+ 2.4, where a race condition in can_open when installed with setgid mail and on systems without POSIX saved ID support lets local users read/modify files with mail-group privileges. Affected component is the can_open function; root cause is a race condition...

CVE-2007-1324

SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service complete packet loss via a packet flood, a different vulnerability than CVE-2006-4613...

CVE-2007-1324

SnapGear appliances before firmware 3.1.4u5 are affected by CVE-2007-1324, enabling remote denial of service via a packet flood. The issue aligns with CVE-2006-4613 family behavior describing multiple vulnerabilities causing DoS through (1) IPSec replay window handling and (2) vulnerable ClamAV v...

CVE-2006-1324

CVE-2006-1324 describes a Cross-site Scripting (XSS) vulnerability in Woltlab Burning Board (wBB) 2.3.4, specifically in acp/lib/class_db_mysql.php. An attacker can inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated, potentially affecting users who view t...

CVE-2005-1324

CVE-2005-1324 affects phpMyVisites via multiple XSS in index.php. The vulnerability allows remote attackers to inject arbitrary scripts/HTML through the (1) part, (2) per, or (3) site parameters. The issue originates from improper handling of user-supplied input in the index.php script, enabling ...

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the 1 artist or 2 song fields of a music file, if the file is processed using Internet Explorer...

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the 1 artist or 2 song fields of a music file, if the file is processed using Internet Explorer...

CVE-2003-1324

Race condition in the canopen function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group...