Fedora Core 6 : krb5-1.5-23.fc6 (2007-694)

The originally-used patch for CVE-2007-3999 didn't completely fix the bug. This update includes the revised patch. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

RHEL 5 : krb5 (RHSA-2007:0892)

Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate t...

[SECURITY] Fedora Core 6 Update: krb5-1.5-23.fc6

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

krb5 incomplete fix for CVE-2007-3999

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate t...

Important: krb5 security update

1.5-29 - update to revised patch for CVE-2007-3999...

CVE-2007-4743

The CVE-2007-4743 entry concerns MIT Kerberos 5 (krb5) RPCSEC_GSS: in versions 1.4 through 1.6.2, the patch for CVE-2007-3999 does not properly check buffer lengths in svc_auth_gss.c, which may allow a remote attacker to trigger a buffer overflow. Affected components include krb5’s RPC library us...

MIT Kerberos 5 KAdminD服务程序未初始化指针远程代码执行漏洞

BUGTRAQ ID: 25533 CVECAN ID: CVE-2007-4000 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是一种常用的开源Kerberos实现。...

CVE-2007-4000

CVE-2007-4000 : In MIT Kerberos 5 kadmind, the kadm5_modify_policy_internal function fails to validate return values when the policy does not exist, allowing a remote authenticated user with the modify policy privilege to trigger a path that writes to an uninitialized pointer and potentially exec...

Fedora Core 6 : krb5-1.5-22.fc6 (2007-690)

This update incorporates fixes for a stack overflow in the rpcsecgss implementation in libgssrpc CVE-2007-3999 and a potential write through an uninitialized pointer in kadmind CVE-2007-4000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

RHEL 5 : krb5 (RHSA-2007:0858)

Updated krb5 packages that fix two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate to...

Debian DSA-1367-1 : krb5 - buffer overflow

It was discovered that a buffer overflow of the RPC library of the MIT Kerberos reference implementation allows the execution of arbitrary code. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Important: krb5 security update

1.5-28 - add preliminary patch to fix buffer overflow in rpcsecgss implementation in libgssrpc 250973, CVE-2007-3999 and write through uninitialized pointer in kadmind 250976, CVE-2007-4000...

[SECURITY] Fedora Core 6 Update: krb5-1.5-21.1

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...

RHEL 2.1 / 3 : krb5 (RHSA-2007:0384)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

CentOS 3 : krb5 (CESA-2007:0384)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

RHEL 4 / 5 : krb5 (RHSA-2007:0562)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

Mandrake Linux Security Advisory : krb5 (MDKSA-2007:137)

David Coffey discovered an uninitialized pointer free flaw in the RPC library used by kadmind. A remote unauthenticated attacker who could access kadmind could trigger the flaw causing kadmind to crash or possibly execute arbitrary code CVE-2007-2442. David Coffey also discovered an overflow flaw...

CentOS 4 / 5 : krb5 (CESA-2007:0562)

Updated krb5 packages that fix several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to...

Critical: krb5 security update

1.2.7-66 - add patch to fix buffer overflow in kadmind 239073, CVE-2007-2798 1.2.7-65 - add patch to fix buffer overflow and double-free in rpc library 239073, CVE-2007-2442/CVE-2007-2443...