SuSE 11.1 Security Update : kbd (SAT Patch Number 3825)

The following bug has been fixed : - The kbd init scripted wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0460 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network...

SLES10: Security update for pam_krb5

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pamkrb5 More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

openSUSE Security Update : pam_krb5 (pam_krb5-218)

Insufficient file access permissions checks allowed users to read Kerberos tickes of other users if pamkrb5 was configured with the option 'existingticket' CVE-2008-3825. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

CVE-2009-3825

creationtimestamp| type| source ---|---|--- 2009-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9103...

Mandriva Linux Security Advisory : pam_krb5 (MDVSA-2008:209-1)

Stphane Bertin discovered a flaw in the pamkrb5 existingticket configuration option where, if enabled and using an existing credential cache, it was possible for a local user to gain elevated privileges by using a different, local user's credential cache CVE-2008-3825. The updated packages have...

Mandriva Update for pam_krb5 MDVSA-2008:209 (pam_krb5)

Check for the Version of pamkrb5 OpenVAS Vulnerability Test Mandriva Update for pamkrb5 MDVSA-2008:209 pamkrb5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

RedHat Update for pam_krb5 RHSA-2008:0907-01

Check for the Version of pamkrb5 OpenVAS Vulnerability Test RedHat Update for pamkrb5 RHSA-2008:0907-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for pam_krb5 RHSA-2008:0907-01

Check for the Version of pamkrb5 OpenVAS Vulnerability Test RedHat Update for pamkrb5 RHSA-2008:0907-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for pam_krb5 FEDORA-2008-8605

Check for the Version of pamkrb5 OpenVAS Vulnerability Test Fedora Update for pamkrb5 FEDORA-2008-8605 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for pam_krb5 FEDORA-2008-8618

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for pam_krb5 FEDORA-2008-8605

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 10 Security Update : pam_krb5 (ZYPP Patch Number 5616)

Insufficient file access permissions checks allowed users to read Kerberos tickes of other users if pamkrb5 was configured with the option 'existingticket'. CVE-2008-3825 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : pam_krb5 (pam_krb5-5624)

Insufficient file access permissions checks allowed users to read Kerberos tickes of other users if pamkrb5 was configured with the option 'existingticket' CVE-2008-3825. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

[ MDVSA-2008:209 ] pam_krb5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:209 http://www.mandriva.com/security/ Package : pamkrb5 Date : October 3, 2008 Affected: 2007.1, 2008.0, 2008.1 Problem Description: St©phane Bertin discovered a flaw in the pamkrb5 existingticket...

Fedora 9 : pam_krb5-2.3.0-2.fc9 (2008-8618)

This update adds a backported fix for CVE-2008-3825, a credential cache permission bypass which becomes possible when the 'existingticket' option is enabled. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2008-3825

pamkrb5 2.2.14 in Red Hat Enterprise Linux RHEL 5 and earlier, when the existingticket option is enabled, uses incorrect privileges when reading a Kerberos credential cache, which allows local users to gain privileges by setting the KRB5CCNAME environment variable to an arbitrary cache filename a...

CVE-2008-3825

CVE-2008-3825 affects pam_krb5 2.2.14 on Red Hat Enterprise Linux (RHEL) 5 and earlier when the existing_ticket option is enabled. The flaw causes reading of a Kerberos credential cache to use incorrect privileges, enabling local users to gain privileges by setting the KRB5CCNAME environment vari...

Moderate: Red Hat Security Advisory: pam_krb5 security update

An updated pamkrb5 package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The pamkrb5 module allows Pluggable Authentication Modules PAM aware applications to use...

iDefense Security Advisory 07.17.07: Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities

Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND Computer Associates Alert Notification Server is used by several CA products, including eTru...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...