openSUSE Security Update : krb5-appl (openSUSE-2012-17)

Fixed a remote code execution in ktelnetd CVE-2011-4862 / bnc738632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-17. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0709-1)

remote authenticated clients could crash the kdc CVE-2010-1322. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-3259. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : krb5 (openSUSE-SU-2013:1833-1)

the following security issues were fixed in krb5 : - Fix a KDC NULL pointer dereference CVE-2013-1417 that could affect realms with an uncommon configuration. bnc850660 bug-850660-CVE-2013-1417-KDC-null-deref-due-to-referrals .dif - Fix a KDC NULL pointer dereference CVE-2013-1418 that could affe...

openSUSE Security Update : krb5 (krb5-4163)

A double-free issue in kdc when PKINIT is enabled allowed remote attackers to crash the daemon or potentially execute arbitrary code CVE-2011-0284. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : krb5-appl (openSUSE-SU-2012:0019-1)

This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE. CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd...

openSUSE Security Update : krb5 (openSUSE-2011-58)

fix KDC NULL pointer dereference in TGS handling MITKRB5-SA-2011-007, bnc730393 CVE-2011-1530 - fix KDC HA feature introduced with implementing KDC poll RT6951 - fix minor error messages for the IAKERB GSSAPI mechanism see: http://krbdev.mit.edu/rt/Ticket/Display.html?id=7020 - fix KDC NULL...

openSUSE Security Update : krb5 (openSUSE-SU-2010:1053-1)

Multiple remote vulnerabilities in the MIT krb5 package have been fixed. They affect client as well as server software. CVE-2010-1323, CVE-2010-1324,CVE-2010-4020 and CVE-2010-4021 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)

A remote attacker may be able to make kadmind free an invalid pointer, leading to a crash of the service CVE-2011-0285. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4373. The text...

openSUSE Security Update : krb5-appl (openSUSE-SU-2012:0019-1)

This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE. CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd...

SuSE 11.2 / 11.3 Security Update : krb5 (SAT Patch Numbers 8533 / 8534)

This update for krb5 fixes the following security issue : - If a KDC serves multiple realms, certain requests could cause setupserverrealm to dereference a NULL pointer, crashing the KDC. CVE-2013-1418 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Fedora 19 : krb5-1.11.3-13.fc19 (2013-21786)

This update incorporates a fix for a bug which could cause clients which attempted to contact servers using TCP to become wedge. This update incorporates fixes for a possible remotely-triggered crash in KDCs which are configured to serve multiple realms at once CVE-2013-1418, and another which...

Fedora Update for krb5 FEDORA-2013-21786

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2013:275 ] krb5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:275 http://www.mandriva.com/en/support/security/ Package : krb5 Date : November 21, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: Updated krb5 package fixes security...

Mandriva Linux Security Advisory : krb5 (MDVSA-2013:275)

Updated krb5 package fixes security vulnerabily : If a KDC serves multiple realms, certain requests can cause setupserverrealm to dereference a NULL pointer, crashing the KDC. This can be triggered by an unauthenticated user CVE-2013-1418. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Updated krb5 package fixes security vulnerabilities

An authenticated remote client can cause a KDC to crash by making a valid TGS-REQ to a KDC serving a realm with a single-component name. The processtgsreq function dereferences a null pointer because an unusual failure condition causes a helper function to return success CVE-2013-1417. If a KDC...

Updated krb5 package fixes security vulnerabily

If a KDC serves multiple realms, certain requests can cause setupserverrealm to dereference a null pointer, crashing the KDC. This can be triggered by an unauthenticated user CVE-2013-1418...

MGASA-2013-0335 Updated krb5 package fixes security vulnerabily

If a KDC serves multiple realms, certain requests can cause setupserverrealm to dereference a null pointer, crashing the KDC. This can be triggered by an unauthenticated user CVE-2013-1418...

Fedora 20 : krb5-1.11.3-32.fc20 (2013-21456)

This update incorporates a bug fix to properly reject more invalid names for credential caches, and the fix for CVE-2013-1417, which could cause a KDC to attempt to dereference a NULL pointer. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

CVE-2013-6800

CVE-2013-6800 affects MIT Kerberos v5 (krb5) 1.10.x when the KDC serves multiple realms. The vulnerability is a NULL pointer dereference in setup_server_realm() that can be triggered by a crafted request, causing a DoS/daemon crash by remote authenticated users. Public notices in Debian (DLA-1265...

Fedora 20 : krb5-1.11.3-29.fc20 (2013-20687)

This update incorporates a backported fix to make libgssapikrb5's credential import routines work better, which is needed by newer versions of gssproxy, and corrects a packaging error which resulted in the /etc/gss directory not being owned by any packages. Further, it incorporates a fix for a...