3119 matches found
CVE-2004-0643
CVE-2004-0643 describes a double-free vulnerability in MIT Kerberos 5 (krb5) prior to or at 1.3.1, specifically in krb5_rd_cred, potentially allowing arbitrary code execution on vulnerable KDC/clients. Connected advisories extend this class of issues to Kerberos KDC and libraries (double-free bug...
CVE-2004-0644
The CVE-2004-0644 entry concerns MIT Kerberos 5 (krb5) 1.2.2–1.3.4, where the asn1buf_skiptail function in the ASN.1 decoder library allows remote attackers to cause a denial of service (infinite loop) via a specific BER encoding. Affected software includes the KDC and krb5 libraries; the impact ...
PT-2004-1058 · Mit +1 · Krb5-Server +5
Name of the Vulnerable Software and Affected Versions: krb5-devel versions 1.2.2 krb5-server versions 1.2.2 krb5-libs versions 1.2.2 krb5-workstation versions 1.2.2 MIT Kerberos 5 krb5 versions prior to 1.3.4 Description: The issue concerns multiple vulnerabilities in the krb5 package of Red Hat...
CVE-2004-0644: Undefined Security Weakness
The asn1bufskiptail function in the ASN.1 decoder library for MIT Kerberos 5 krb5 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service infinite loop via a certain BER encoding...
CVE-2004-0642: Double Free
Double free vulnerabilities in the error handling code for ASN.1 decoders in the 1 Key Distribution Center KDC library and 2 client library for MIT Kerberos 5 krb5 1.3.4 and earlier may allow remote attackers to execute arbitrary code...
MIT krb5: Multiple vulnerabilities
Background MIT krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology. Description The implementation of the Key Distribution Center KDC and the MIT krb5 library contain double-free vulnerabilities, making client programs as we...
GLSA-200409-09 : MIT krb5: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200409-09 MIT krb5: Multiple vulnerabilities The implementation of the Key Distribution Center KDC and the MIT krb5 library contain double-free vulnerabilities, making client programs as well as application servers vulnerable. The...
FreeBSD : krb5 -- ASN.1 decoder denial-of-service vulnerability (86)
The following package needs to be updated: krb5 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgbd60922bfb8d11d8a13e000a95bc6fae.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...
[SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 543-1 [email protected] http://www.debian.org/security/ Martin Schulze August 31st, 2004 http://www.debian.org/security/faq -...
GLSA-200406-21 : mit-krb5: Multiple buffer overflows in krb5_aname_to_localname
The remote host is affected by the vulnerability described in GLSA-200406-21 mit-krb5: Multiple buffer overflows in krb5anametolocalname The library function krb5anametolocalname contains multiple buffer overflows. This is only exploitable if explicit mapping or rules-based mapping is enabled...
Mandrake Linux Security Advisory : krb5 (MDKSA-2004:056-1)
Multiple buffer overflows exist in the krb5anametolocalname library function that if exploited could lead to unauthorized root privileges. In order to exploit this flaw, an attacker must first successfully authenticate to a vulnerable service, which must be configured to enable the explicit mappi...
Mandrake Linux Security Advisory : krb5 (MDKSA-2001:093)
A buffer overflow exists in the telnet portion of Kerberos that could provide root access to local users. MDKSA-2001:068 provided a similar fix to the normal telnet packages, but the Kerberized equivalent was not updated previously. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Solaris 9 (x86) : 116045-02
SunOS 5.9x86: krb5 krb5kdc patch. Date this patch was last updated by Sun : Aug/10/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (x86) : 115168-24
SunOS 5.9x86: krb5, gss patch. Date this patch was last updated by Sun : Sep/14/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 9 (sparc) : 112923-04
SunOS 5.9: krb5 usr/lib patch. Date this patch was last updated by Sun : Aug/10/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
mit-krb5: Multiple buffer overflows in krb5_aname_to_localname
Background mit-krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology. Description The library function krb5anametolocalname contains multiple buffer overflows. This is only exploitable if explicit mapping or rules-based mappin...
[SECURITY] [DSA 520-1] New krb5 packages fix buffer overflows
-------------------------------------------------------------------------- Debian Security Advisory DSA 520-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 16th, 2004 http://www.debian.org/security/faq -...
DSA-520 krb5 - buffer overflows
Bulletin has no description...
Moderate: Red Hat Security Advisory: krb5 security update
Updated Kerberos 5 krb5 packages which correct buffer overflows in the krb5anametolocalname function are now available. Kerberos is a network authentication system. Bugs have been fixed in the krb5anametolocalname library function. Specifically, buffer overflows were possible for all Kerberos...