Fedora 15 : krb5-appl-1.0.1-7.fc15 (2011-9080)

This update corrects a potential failure to properly set the effective group ID in the GSSAPI-capable FTP server MITKRB5-SA-2011-005, CVE-2011-1526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

CVE-2011-1526

The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...

CVE-2011-1526: Improper Privilege Management

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications aka krb5-appl 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP...

MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-005 MIT krb5 Security Advisory 2011-005 Original release: 2011-07-05 Topic: FTP daemon fails to set effective group ID CVE-2011-1526 CVSSv2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:H/RL:O/RC:C CVSSv2 Base Score: 6.5 Access Vector: Network...

RHEL 6 : krb5-appl (RHSA-2011:0920)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0920 advisory. The krb5-appl packages provide Kerberos-aware telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as...

Important: Red Hat Security Advisory: krb5-appl security update

Updated krb5-appl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

krb5-appl security update

1.0.1-2.1 - ftpd: add candidate patch to detect setegid/setregid/setresgid and check for errors when calling them MITKRB5-SA-2011-005, CVE-2011-1526, 713341...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for krb5-appl MDVA-2010:236 (krb5-appl)

Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVA-2010:236 krb5-appl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris 10 (x86) : 124631-42 (deprecated)

SunOS 5.10x86: System Administration Appl. Date this patch was last updated by Sun : Jun/28/10 This plugin has been deprecated and either replaced with individual 124631 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

CVE-2006-5189: Undefined Security Weakness

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...