Fedora 14 : krb5-1.8.2-6.fc14 (2010-15803)

This update incorporates the upstream patch to fix an uninitialized pointer crash in the KDC's authorization data handling routines CVE-2010-1322. It also pulls up a few backports and compilation flag changes from F15. Note that Tenable Network Security has extracted the preceding description blo...

[SECURITY] Fedora 14 Update: krb5-1.8.2-6.fc14

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

Mandriva Linux Security Advisory : krb5 (MDVSA-2010:202)

A vulnerability was discovered and corrected in krb5 : The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote attackers to cause a denial of...

Ubuntu 10.04 LTS / 10.10 : krb5 vulnerability (USN-999-1)

Mike Roszkowski discovered that the Kerberos KDC did not correctly validate the contents of certain messages. If an authenticated remote attacker sent specially crafted TGS requests, the KDC service would crash, leading to a denial of service. Note that Tenable Network Security has extracted the...

MITKRB5-SA-2010-006 [CVE-2010-1322] KDC uninitialized pointer crash in authorization data handling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2010-006 MIT krb5 Security Advisory 2010-006 Original release: 2010-10-05 Topic: KDC uninitialized pointer crash in authorization data handling CVE-2010-1322 CVSSv2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:C/E:H/RL:OF/RC:C CVSSv2 Base Score: 8 Acce...

Fedora 13 : samba-3.5.5-68.fc13 (2010-14627)

---------------------------------------------------------------------- ---------- ChangeLog : - Thu Sep 9 2010 Guenther Deschner - 3.5.5-68 - Security Release, fixes CVE-2010-3069 - resolves: 630869 - Thu Aug 26 2010 Guenther Deschner - 3.5.4-67 - Put winbind krb5 locator plugin into a separate r...

VMSA-2010-0013 : VMware ESX third-party updates for Service Console

a. Service Console update for cpio The service console package cpio is updated to version 2.5-6.RHEL3 for ESX 3.x versions and updated to version 2.6-23.el54.1 for ESX 4.x versions. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-4268 and CVE-2010-06...

VMware Releases Updates for ESX Service Console Packages

VMware has released security updates for multiple third party packages for the ESX Service Console. These updates address vulnerabilities in the perl, krb5, samba, tar, and cpio packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a...

Ubuntu Update for krb5 vulnerability USN-940-2

Ubuntu Update for Linux kernel vulnerabilities USN-940-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN9402.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for krb5 vulnerability USN-940-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : krb5 vulnerability (USN-940-2)

USN-940-1 fixed vulnerabilities in Kerberos. This update provides the corresponding updates for Ubuntu 10.04. Joel Johnson, Brian Almeida, and Shawn Emery discovered that Kerberos did not correctly verify certain packet structures. An unauthenticated remote attacker could send specially crafted...

Mandriva Update for krb5 MDVA-2010:177-1 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVA-2010:177-1 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for krb5 MDVA-2010:177-1 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVA-2010:177-1 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for krb5 MDVA-2010:177 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVA-2010:177 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for krb5 MDVA-2010:177 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVA-2010:177 krb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 12 : krb5-1.7-18.fc12 (2010-0503)

This update incorporates fixes from upstream which correct integer underflow problems in the AES and RC4 decryption routines CVE-2009-4212. It also corrects a failure in 'kdb5util load' which could occur when the database files being created did not previously exist. Note that Tenable Network...

Fedora 11 : krb5-1.6.3-31.fc11 (2010-8796)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 12 : krb5-1.7.1-9.fc12 (2010-8805)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 13 : krb5-1.7.1-10.fc13 (2010-8749)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 11 : krb5-1.6.3-29.fc11 (2010-6108)

Sol Jerome noticed that the kadmind server daemon could be made to dereference freed memory and crash. This update backports the changeset which contains the fix for this bug CVE-2010-0629. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 12 : krb5-1.7.1-7.fc12 (2010-7130)

Joel Johnson reported a possible double-free in the Kerberos KDC MITKRB5-SA-2010-004, CVE-2010-1320. This update adds the upstream fix for this bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...