CVE-2015-5913: Improper Access Control

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

Oracle Solaris Third-Party Patch Update : telnet (cve_2011_4862_buffer_overflow)

The remote Solaris system is missing necessary patches to address security updates : - Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications aka krb5-appl 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other...

openSUSE Security Update : samba (openSUSE-SU-2014:0404-1)

"Samba was updated to 4.1.6, fixing bugs and security issues : - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; bnc849224. - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; bnc855866. Also the following bugs...

APPLE-SA-2014-04-22-1 Security Update 2014-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-1 Security Update 2014-002 Security Update 2014-002 is now available and addresses the following: CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2...

CVE-2014-1316

Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service abort and daemon exit via ASN.1 data encountered in the Kerberos 5 protocol...

Design/Logic Flaw

Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service abort and daemon exit via ASN.1 data encountered in the Kerberos 5 protocol...

CVE-2014-1316

Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service abort and daemon exit via ASN.1 data encountered in the Kerberos 5 protocol...

CVE-2014-1316

CVE-2014-1316 affects Apple OS X up to 10.9.2, where Heimdal Kerberos (as used in OS X) is vulnerable. A remote attacker can trigger denial of service by sending crafted ASN.1 data in Kerberos 5, causing an abort and daemon exit. The Apple Security Update 2014-002 (Security Update 2014-002) conta...

PT-2014-4098

Name of the Vulnerable Software and Affected Versions Heimdal versions as used in Apple OS X through 10.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in the abort and exit of the daemon, via ASN.1 data encountered in the Kerberos 5 protocol...

CVE-2014-1316: Improper Input Validation

Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service abort and daemon exit via ASN.1 data encountered in the Kerberos 5 protocol...

Mac OS X Multiple Vulnerabilities (Security Update 2014-002)

The remote host is running a version of Mac OS X 10.7, 10.8, or 10.9 that does not have Security Update 2014-002 applied. This update contains several security-related fixes for the following components : - CFNetwork HTTPProtocl - CoreServicesUIAgent - FontParser - Heimdal Kerberos - ImageIO -...

Gentoo Security Advisory GLSA 201202-05 (heimdal)

The remote host is missing updates announced in advisory GLSA 201202-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201202-05 (heimdal)

The remote host is missing updates announced in advisory GLSA 201202-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201202-05 : Heimdal: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201202-05 Heimdal: Arbitrary code execution A boundary error in the 'encryptkeyid' function in appl/telnet/libtelnet/encrypt.c of the telnet daemon and client could cause a buffer overflow. Impact : An unauthenticated remote...

FreeBSD Ports: krb5-appl

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 2372-1 (heimdal)

The remote host is missing an update to heimdal announced via advisory DSA 2372-1. OpenVAS Vulnerability Test $Id: deb23721.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2372-1 heimdal Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2372-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2372-1 : heimdal - buffer overflow

It was discovered that the Kerberos support for telnetd contains a pre-authentication buffer overflow, which may enable remote attackers who can connect to TELNET to execute arbitrary code with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Mandriva Update for krb5-appl MDVSA-2011:195 (krb5-appl)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : krb5-appl (MDVSA-2011:195)

A vulnerability has been discovered and corrected in krb5-appl, heimdal and netkit-telnet : An unauthenticated remote attacker can cause a buffer overflow and probably execute arbitrary code with the privileges of the telnet daemon CVE-2011-4862. In Mandriva the telnetd daemon from the...