1546 matches found
Moderate: cyrus-sasl security update
2.1.15-15 - Changed spec file to include the mech patch all the time. - Added patch to prevent printing null realm - Applied existing mech for 1.5 to 2.1 Related: rhbz189814 2.1.15-14 - temporarily back out the fixes for 157012, 190113 2.1.15-13 - add unapplied patches which make the DIGEST-MD5...
CVE-2007-0553: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 datarealm and 2 url parameters, different vectors than CVE-2004-2604. NOTE: some of these details are obtained from third party...
CVE-2007-0417: Undefined Security Weakness
BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity...
RHEL 4 : mod_auth_kerb (RHSA-2006:0746)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2006:0746 advisory. modauthkerb is module for the Apache HTTP Server designed to provide Kerberos authentication over HTTP. An off by one flaw was found in the way...
CVE-2005-4270
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field...
Fedora Core 3 : krb5-1.3.6-7 (2005-552)
A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 3 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 3, successful exploitation of this issue can only lead to a denial of service K...
Fedora Core 4 : krb5-1.4.1-5 (2005-553)
A double-free flaw was found in the krb5recvauth routine which may be triggered by a remote unauthenticated attacker. Fedora Core 4 contains checks within glibc that detect double-free flaws. Therefore, on Fedora Core 4, successful exploitation of this issue can only lead to a denial of service K...
MITKRB5-SA-2005-003: double-free in krb5_recvauth
MIT krb5 Security Advisory 2005-003 Original release: 2005-07-12 Topic: double-free in krb5recvauth Severity: CRITICAL SUMMARY ======= The krb5recvauth function can free previously freed memory under some error conditions. This vulnerability may allow an unauthenticated remote attacker to execute...
FreeBSD : krb5 -- heap buffer overflow vulnerability in libkadm5srv (0bb7677d-52f3-11d9-a9e7-0001020eed82)
A MIT krb5 Security Advisory reports : The MIT Kerberos 5 administration library libkadm5srv contains a heap buffer overflow in password history handling code which could be exploited to execute arbitrary code on a Key Distribution Center KDC host. The overflow occurs during a password change of ...
CVE-2004-2165
CVE-2004-2165 affects Lords of the Realm III (versions
CVE-2004-2165
Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...
CVE-2004-2165: Undefined Security Weakness
Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...
Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow (2)
Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow 2 // source: https://www.securityfocus.com/bid/13537/info A buffer overflow vulnerability exists in the htdigest utility included with Apache. The vulnerability is due to improper bounds checking when copying user-supplied realm...
Apache htdigest realm Variable Overflow
Binary data 2884.prm...
DEBIAN-CVE-2005-1344
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is...
CVE-2005-1344
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is...
CVE-2005-1344
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is...
CVE-2005-1344: Undefined Security Weakness
Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is...