CVE-2023-25565 GSS-NTLMSSP vulnerable to incorrect free when decoding target information

GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the cb and sh buffers contain a copy of the data that...

CVE-2023-25565

The CVE-2023-25565 vulnerability affects the GSS-NTLMSSP component (NTLM mechglue for GSSAPI). Prior to version 1.2.0, an incorrect free during decoding of target information can trigger a denial-of-service by causing a false assumption that certain buffers contain data to free; exploitation is r...

CVE-2020-25565

creationtimestamp| type| source ---|---|--- 2021-08-12 00:38:52+00:00| seen| https://t.me/cibsecurity/27192...

CVE-2020-25565

CVE-2020-25565 affects SapphireIMS 5.0. The issue is a hardcoded credential (username: sapphire, password: ims) that grants portal access. Once accessed, an attacker can inject malicious OS commands via the server-side functions for ping, traceroute, and snmp, enabling code execution on the serve...