Fedora 15 : krb5-1.9-7.fc15 (2011-5333)

This update incorporates the upstream patches to fix an attempt to free an invalid pointer in kadmind MITKRB5-SA-2011-004. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

FreeBSD : krb5 -- MITKRB5-SA-2011-001, kpropd denial of service (64f24a1e-66cf-11e0-9deb-f345f3aa24f0)

An advisory published by the MIT Kerberos team says : The MIT krb5 KDC database propagation daemon kpropd is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it can cause...

FreeBSD : krb5 -- MITKRB5-SA-2011-004, kadmind invalid pointer free() [CVE-2011-0285] (6a3c3e5c-66cb-11e0-a116-c535f3aa24f0)

An advisory published by the MIT Kerberos team says : The password-changing capability of the MIT krb5 administration daemon kadmind has a bug that can cause it to attempt to free an invalid pointer under certain error conditions. This can cause the daemon to crash or induce the execution of...

CentOS 5 : krb5 (CESA-2011:0199)

Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

RHEL 6 : krb5 (RHSA-2011:0447)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0447 advisory. - krb5: kadmind invalid pointer free MITKRB5-SA-004 CVE-2011-0285 Note that Nessus has not tested for this issue but has instead relied only on the...

FreeBSD : krb5 -- MITKRB5-SA-2011-003, KDC vulnerable to double-free when PKINIT enabled (7edac52a-66cd-11e0-9398-5d45f3aa24f0)

An advisory published by the MIT Kerberos team says : The MIT Kerberos 5 Key Distribution Center KDC daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication PKINIT capability is enabled, resulting in daemon crash or arbitrary code execution which ...

krb5 security update

1.8.2-3.7 - kadmind: add upstream patch to fix free on an invalid pointer 696341, MITKRB5-SA-2011-004, CVE-2011-0285...

MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-004 MIT krb5 Security Advisory 2011-004 Original release: 2011-04-12 Last update: 2011-04-12 Topic: kadmind invalid pointer free CVE-2011-0285 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Base Score: 10 Access...

Fedora Update for krb5 FEDORA-2011-3464

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : krb5-1.7.1-18.fc13 (2011-3464)

This update incorporates upstream fixes for a double-free in the KDC which could occur if the KDC needed to send back typed-data along with an error MITKRB5-SA-2011-003, CVE-2011-0284. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

Fedora 14 : krb5-1.8.2-9.fc14 (2011-3462)

This update incorporates upstream fixes for a double-free in the KDC which could occur if the KDC needed to send back typed-data along with an error MITKRB5-SA-2011-003, CVE-2011-0284. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

Fedora Update for krb5 FEDORA-2011-3462

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for krb5 FEDORA-2011-3462

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2011-3462 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Ubuntu Update for krb5 vulnerability USN-1088-1

Ubuntu Update for Linux kernel vulnerabilities USN-1088-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10881.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for krb5 vulnerability USN-1088-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1088-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 15 : krb5-1.9-6.fc15 (2011-3547)

This update incorporates upstream fixes for a double-free in the KDC which could occur if the KDC needed to send back typed-data along with an error MITKRB5-SA-2011-003, CVE-2011-0284. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:048)

A vulnerability was discovered and corrected in krb5 : The MIT Kerberos 5 Key Distribution Center KDC daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication PKINIT capability is enabled, resulting in daemon crash or arbitrary code execution which...

CVE-2011-0284

Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...

RHEL 6 : krb5 (RHSA-2011:0356)

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

krb5 security update

1.8.2-3.6 - add revised upstream patch to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564 1.8.2-3.5 - add upstream patches to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564...