CVE-2010-4020

MIT Kerberos 5 (krb5) 1.8.x–1.8.3 is affected by CVE-2010-4020 due to not rejecting RC4 key-derivation checksums, enabling remote authenticated users to forge AD-SIGNEDPATH or AD-KDC-ISSUED signatures and potentially gain privileges. Mitigation/advisories reference MITKRB5-SA-2010-007 and patches...

CVE-2010-4021

CVE-2010-4021 affects MIT Kerberos 5 (krb5) 1.7, where the KDC may inappropriately allow TGT credentials to armoring TGS requests. This can let a remote authenticated attacker impersonate a client by rewriting an inner request via a problematic KrbFastArmoredReq handling. The issue is tied to iss...

CVE-2010-1323

CVE-2010-1323 concerns MIT Kerberos 5 (krb5) with vulnerable checksums in versions 1.3.x–1.8.3. The issue may allow remote attackers to modify user-visible prompt text, alter KDC responses, or forge a KRB-SAFE message when checksums are unkeyed or RC4-based. Connected documents indicate affected ...

SuSE 11 Security Update : krb5 (SAT Patch Number 2437)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

CentOS 4 / 5 : krb5 (CESA-2010:0926)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Debian DSA-2129-1 : krb5 - checksum verification weakness

A vulnerability has been found in krb5, the MIT implementation of Kerberos. MIT krb5 clients incorrectly accept unkeyed checksums in the SAM-2 preauthentication challenge: an unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of...

SuSE 11 Security Update : krb5 (SAT Patch Number 2235)

Authenticated users could crash the kadmind process by referencing freed memory CVE-2010-0629. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Fedora Update for krb5 FEDORA-2010-15803

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] [DSA-2129-1] New krb5 packages fix checksum verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-2129-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 1, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2129-1] New krb5 packages fix checksum verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-2129-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 1, 2010 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:246)

Multiple vulnerabilities were discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of usin...

MITKRB5-SA-2010-007 Multiple checksum handling vulnerabilities [CVE-2010-1324 CVE-2010-1323 CVE-2010-4020 CVE-2010-4021]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2010-007 MIT krb5 Security Advisory 2010-007 Original release: 2010-11-30 Last update: 2010-11-30 Topic: Multiple checksum handling vulnerabilities CVE-2010-1324 krb5 GSS-API applications may accept unkeyed checksums krb5 application servic...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:245)

A vulnerability was discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of using a...

DSA-2129-1 krb5 - checksum verification weakness

Bulletin has no description...

RHEL 6 : krb5 (RHSA-2010:0925)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0925 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a...

RHEL 4 / 5 : krb5 (RHSA-2010:0926)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0926 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trust...

Important: Red Hat Security Advisory: krb5 security and bug fix update

Updated krb5 packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

krb5 security update

1.6.1-36.el55.6 - incorporate candidate patch for checksum acceptance issues from MITKRB5-SA-2010-007 CVE-2010-1323, 652307...

RHEL 6 : krb5 (RHSA-2010:0863)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2010:0863 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted...

Mandriva Update for krb5 MDVSA-2010:202-1 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2010:202-1 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...