GLSA-200501-05 : mit-krb5: Heap overflow in libkadm5srv

The remote host is affected by the vulnerability described in GLSA-200501-05 mit-krb5: Heap overflow in libkadm5srv The MIT Kerberos 5 administration library libkadm5srv contains a heap overflow in the code handling password changing. Impact : Under specific circumstances an attacker could execut...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

Mandrake Linux Security Advisory : krb5 (MDKSA-2004:156)

Michael Tautschnig discovered a heap buffer overflow in the history handling code of libkadm5srv which could be exploited by an authenticated user to execute arbitrary code on a Key Distribution Center KDC server. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300...

GLSA-200410-24 : MIT krb5: Insecure temporary file use in send-pr.sh

The remote host is affected by the vulnerability described in GLSA-200410-24 MIT krb5: Insecure temporary file use in send-pr.sh The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact : A local attacker could create symbolic links in the...

MIT krb5: Insecure temporary file use in send-pr.sh

Background MIT krb5 is the free implementation of the Kerberos network authentication protocol written by the Massachusetts Institute of Technology. Description The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact A local attacker could creat...

CVE-2004-0971

The CVE-2004-0971 issue affects the krb5-send-pr script in the krb5 package, allowing local users to overwrite files via a symlink attack on temporary files. Description in the sources notes this vulnerability for Trustix Secure Linux 1.5–2.1 and potentially other OSes. The vulnerability originat...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

Debian DSA-266-1 : krb5 - several vulnerabilities

Several vulnerabilities have been discovered in krb5, an implementation of MIT Kerberos. - A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4...

Debian DSA-520-1 : krb5 - buffer overflows

In their advisory MITKRB5-SA-2004-001, the MIT Kerberos announced the existence of buffer overflow vulnerabilities in the krb5anametolocalname function. This function is only used if anametolocalname is enabled in the configuration this is not enabled by default. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-383-2 : ssh-krb5 - possible remote vulnerability

Several bugs have been found in OpenSSH's buffer handling. It is not known if these bugs are exploitable, but as a precaution an upgrade is advised. DSA-383-2: This advisory is an addition to the earlier DSA-383-1 advisory: Solar Designer found four more bugs in OpenSSH that may be exploitable...

CVE-2004-0643

CVE-2004-0643 describes a double-free vulnerability in MIT Kerberos 5 (krb5) prior to or at 1.3.1, specifically in krb5_rd_cred, potentially allowing arbitrary code execution on vulnerable KDC/clients. Connected advisories extend this class of issues to Kerberos KDC and libraries (double-free bug...

CVE-2004-0642

MIT Kerberos 5 (krb5) is affected by CVE-2004-0642 due to double-free vulnerabilities in the ASN.1 decoder error handling for both the KDC library and the krb5 client library (versions 1.3.4 and earlier). The issue can allow remote attackers to execute arbitrary code, potentially compromising the...

CVE-2004-0644

The CVE-2004-0644 entry concerns MIT Kerberos 5 (krb5) 1.2.2–1.3.4, where the asn1buf_skiptail function in the ASN.1 decoder library allows remote attackers to cause a denial of service (infinite loop) via a specific BER encoding. Affected software includes the KDC and krb5 libraries; the impact ...

PT-2004-1058 · Mit +1 · Krb5-Server +5

Name of the Vulnerable Software and Affected Versions: krb5-devel versions 1.2.2 krb5-server versions 1.2.2 krb5-libs versions 1.2.2 krb5-workstation versions 1.2.2 MIT Kerberos 5 krb5 versions prior to 1.3.4 Description: The issue concerns multiple vulnerabilities in the krb5 package of Red Hat...

MIT krb5: Multiple vulnerabilities

Background MIT krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology. Description The implementation of the Key Distribution Center KDC and the MIT krb5 library contain double-free vulnerabilities, making client programs as we...

GLSA-200409-09 : MIT krb5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200409-09 MIT krb5: Multiple vulnerabilities The implementation of the Key Distribution Center KDC and the MIT krb5 library contain double-free vulnerabilities, making client programs as well as application servers vulnerable. The...

FreeBSD : krb5 -- ASN.1 decoder denial-of-service vulnerability (86)

The following package needs to be updated: krb5 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgbd60922bfb8d11d8a13e000a95bc6fae.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

[SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 543-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2004 http://www.debian.org/security/faq -...

GLSA-200406-21 : mit-krb5: Multiple buffer overflows in krb5_aname_to_localname

The remote host is affected by the vulnerability described in GLSA-200406-21 mit-krb5: Multiple buffer overflows in krb5anametolocalname The library function krb5anametolocalname contains multiple buffer overflows. This is only exploitable if explicit mapping or rules-based mapping is enabled...