Debian DLA-1265-1 : krb5 security update

Kerberos, a system for authenticating users and services on a network, was affected by several vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2013-1418 Kerberos allows remote attackers to cause a denial of service NULL pointer dereference an...

[SECURITY] Fedora 27 Update: heimdal-7.5.0-1.fc27

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

[SECURITY] Fedora 26 Update: heimdal-7.5.0-1.fc26

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

[SECURITY] Fedora 26 Update: krb5-1.15.2-4.fc26

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 27 Update: krb5-1.15.2-4.fc27

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X

Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

[SECURITY] Fedora 27 Update: krb5-1.15.1-28.fc27

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 25 Update: krb5-1.14.4-9.fc25

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 26 Update: krb5-1.15.1-28.fc26

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

[SECURITY] Fedora 26 Update: krb5-1.15.1-25.fc26

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

HAProxy Network Authentication Vulnerability

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides 4-layer , 7-layer proxy , and can support tens of thousands of level of connections , with high efficiency , stability and other characteristics . HAProxy suffers from a network...

[SECURITY] Fedora 25 Update: freeradius-3.0.15-1.fc25

The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...

[SECURITY] Fedora 26 Update: krb5-1.15.1-17.fc26

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

USN-3353-3: Heimdal vulnerability

USN-3353-1 fixed a vulnerability in Heimdal. This update provides the corresponding updade for Ubuntu 12.04 ESM. Original advisory details: Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that Heimdal clients incorrectly trusted unauthenticated portions of Kerberos tickets. A...

[SECURITY] Fedora 25 Update: heimdal-7.4.0-1.fc25

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

USN-3353-1: Heimdal vulnerability

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that Heimdal clients incorrectly trusted unauthenticated portions of Kerberos tickets. A remote attacker could use this to impersonate trusted network services or perform other attacks...

May 25, 2017—KB4020102 (OS Build 15063.332)

None None...

Chrome Browser Hack Opens Door to Credential Theft

A vulnerability in Google’s Chrome browser allows hackers to automatically download a malicious file onto a victim’s PC that could be used to steal credentials and launch SMB relay attacks. Bosko Stankovic, information security engineer at DefenseCode, found the flaw in the default configuration ...

PT-2017-10082

Name of the Vulnerable Software and Affected Versions Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit versions 9.5 and prior Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit version 9.7 Description An issue allows an unauthorized user with physical access to...