openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0292-1)

This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. CVE-2010-1321: CVSS v2 Base Score: 6.8 MEDIUM AV:N/AC:L/Au:S/C:N/I:N/A:C %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Debian DSA-2052-1 : krb5 - NULL pointer dereference

Shawn Emery discovered that in MIT Kerberos 5 krb5, a system for authenticating users and services on a network, a NULL pointer dereference flaw in the Generic Security Service Application Program Interface GSS-API library could allow an authenticated remote attacker to crash any server applicati...

[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2052-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 24, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2052-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2052-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 24, 2010 http://www.debian.org/security/faq -...

CentOS 3 / 4 / 5 : krb5 (CESA-2010:0423)

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2010-005 MIT krb5 Security Advisory 2010-005 Original release: 2010-05-18 Topic: GSS-API library null pointer dereference CVE-2010-1321 CVSSv2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 6.8 Access Vector: Network...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:100)

A vulnerability has been found and corrected in krb5 : Certain invalid GSS-API tokens can cause a GSS-API acceptor server to crash due to a NULL pointer dereference in the GSS-API library CVE-2010-1321. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those...

CVE-2010-1321

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

RHEL 3 / 4 / 5 : krb5 (RHSA-2010:0423)

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

krb5 security update

1.6.1-36.el55.4 - add candidate patch to correct KDC null pointer dereference which could be triggered by malformed client requests CVE-2010-1321, 583703 1.6.1-36.el55.3 - add upstream patch to fix a few use-after-free bugs, including one in kadmind CVE-2010-0629, 578185...

RHEL 5 : krb5 (RHSA-2010:0343)

Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 86b8b655-4d1a-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 86b8b655-4d1a-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Fedora Update for krb5 FEDORA-2010-7130

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0147-1)

Specially crafted requests be authenticated remote attackers could crash the KDC CVE-2010-1320. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-2348. The text description of this plugin i...

MITKRB5-SA-2010-004 [CVE-2010-1320] double free in KDC

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2010-004 MIT krb5 Security Advisory 2010-004 Original release: 2010-04-20 Topic: double free in KDC CVE-2010-1320 CVSSv2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 9 Access Vector: Network Access Complexity: Low...

FreeBSD : krb5 -- KDC double free vulnerability (86b8b655-4d1a-11df-83fb-0015587e2cc1)

The MIT Kerberos team reports : An authenticated remote attacker can crash the KDC by inducing the KDC to perform a double free. Under some circumstances on some platforms, this could also allow malicious code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID a30573dc-4893-11df-a5f9-001641aeabdf OpenVAS Vulnerability Test $ Description: Auto generated from VID a30573dc-4893-11df-a5f9-001641aeabdf Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 9ac0f9c4-492b-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 9ac0f9c4-492b-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...