MIT Kerberos 5 KAdminD服务程序未初始化指针远程代码执行漏洞

BUGTRAQ ID: 25533 CVECAN ID: CVE-2007-4000 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。...

CVE-2007-4000

CVE-2007-4000 : In MIT Kerberos 5 kadmind, the kadm5_modify_policy_internal function fails to validate return values when the policy does not exist, allowing a remote authenticated user with the modify policy privilege to trigger a path that writes to an uninitialized pointer and potentially exec...

Fedora Core 6 : krb5-1.5-22.fc6 (2007-690)

This update incorporates fixes for a stack overflow in the rpcsecgss implementation in libgssrpc CVE-2007-3999 and a potential write through an uninitialized pointer in kadmind CVE-2007-4000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

RHEL 5 : krb5 (RHSA-2007:0858)

Updated krb5 packages that fix two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate to...

Debian DSA-1367-1 : krb5 - buffer overflow

It was discovered that a buffer overflow of the RPC library of the MIT Kerberos reference implementation allows the execution of arbitrary code. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Important: krb5 security update

1.5-28 - add preliminary patch to fix buffer overflow in rpcsecgss implementation in libgssrpc 250973, CVE-2007-3999 and write through uninitialized pointer in kadmind 250976, CVE-2007-4000...

[SECURITY] Fedora Core 6 Update: krb5-1.5-21.1

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

RHEL 2.1 / 3 : krb5 (RHSA-2007:0384)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

CentOS 3 : krb5 (CESA-2007:0384)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

RHEL 4 / 5 : krb5 (RHSA-2007:0562)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

CentOS 4 / 5 : krb5 (CESA-2007:0562)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

Mandrake Linux Security Advisory : krb5 (MDKSA-2007:137)

David Coffey discovered an uninitialized pointer free flaw in the RPC library used by kadmind. A remote unauthenticated attacker who could access kadmind could trigger the flaw causing kadmind to crash or possibly execute arbitrary code CVE-2007-2442. David Coffey also discovered an overflow flaw...

Critical: krb5 security update

1.2.7-66 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.2.7-65 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0562 Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authenticati...

CVE-2007-2442

CVE-2007-2442 affects MIT Kerberos 5 (krb5) RPC library. In krb5 1.6.1 and earlier, the function gssrpc__svcauth_gssapi can mishandle a zero-length RPC credential, causing kadmind to free an uninitialized pointer during cleanup. This remote flaw could enable arbitrary code execution on vulnerable...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0384 Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network...

Important: krb5 security update

1.3.4-49 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.3.4-48 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...

MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2007-005 Original release: 2007-06-26 Last update: 2007-06-26 Topic: kadmind vulnerable to buffer overflow Severity: CRITICAL CVE: CVE-2007-2798 CERT: VU554257 SUMMARY ======= The MIT krb5 Kerberos administration daemon...

MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2007-004 Original release: 2007-06-26 Last update: 2007-06-26 Topic: kadmind affected by multiple RPC library vulnerabilities Severity: CRITICAL CVE: CVE-2007-2442 CERT: VU356961 CVE: CVE-2007-2443 CERT: VU365313 SUMMARY...

MIT Kerberos kadmind principal renaming stack buffer overflow

Overview The MIT Kerberos administration daemon kadmind contains a stack buffer overflow that may allow a remote, authenticated attacker to execute arbitrary code or cause a denial of service. Description A vulnerability exists in the way the principal renaming operation used by the Kerberos...