[SECURITY] [DSA 476-1] New heimdal packages fix cross-realm vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 476-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 6th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0371

Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path...

CVE-2004-0371

Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path...

CVE-2004-0371

CVE-2004-0371 affects Heimdal Kerberos implementations prior to fixed versions (0.6.1 and 0.5.x vulnerable ranges). The issue is incorrect validation of cross-realm trust paths, i.e., missing/insufficient checks of the transited/realm chain, allowing a domain controller or realm host with control...

DSA-476 heimdal - cross-realm

Bulletin has no description...

[SECURITY] [DSA 269-2] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-2 [email protected] http://www.debian.org/security/ Martin Schulze April 9th, 2003 http://www.debian.org/security/faq -...

Critical: Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities

Updated Kerberos packages for Red Hat Linux 9 fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped as part of Red Hat Linux 9...

Critical: Red Hat Security Advisory: krb5 security update

Updated kerberos packages fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped by Red Hat. An integer signedness error in the...

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...

DSA-269 heimdal - Cryptographic weakness

Bulletin has no description...

DSA-266 krb5 - several vulnerabilities

Bulletin has no description...

MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2003-004 2003-03-17 Topic: Cryptographic weaknesses in Kerberos v4 protocol Severity: CRITICAL SUMMARY ======= A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to...

DEBIAN-CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...