Lucene search
+L

1258 matches found

CVE
CVE
added 2004/04/06 4:0 a.m.64 views

CVE-2004-0371

CVE-2004-0371 affects Heimdal Kerberos implementations prior to fixed versions (0.6.1 and 0.5.x vulnerable ranges). The issue is incorrect validation of cross-realm trust paths, i.e., missing/insufficient checks of the transited/realm chain, allowing a domain controller or realm host with control...

5CVSS6.3AI score0.01528EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2004/04/06 12:0 a.m.19 views

DSA-476 heimdal - cross-realm

Bulletin has no description...

5CVSS6AI score0.01528EPSS
SaveExploits0
Debian
Debian
added 2003/04/09 3:56 p.m.41 views

[SECURITY] [DSA 269-2] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-2 [email protected] http://www.debian.org/security/ Martin Schulze April 9th, 2003 http://www.debian.org/security/faq -...

7.5CVSS0.5AI score0.04284EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2003/04/02 9:57 a.m.12 views

Critical: Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities

Updated Kerberos packages for Red Hat Linux 9 fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped as part of Red Hat Linux 9...

7.5CVSS7.3AI score0.15031EPSS
SaveExploits1References3
OSV
OSV
added 2003/04/02 5:0 a.m.4 views

DEBIAN-CVE-2003-0072

The Key Distribution Center KDC in Kerberos 5 krb5 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service crash on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array aka "array overrun"...

5CVSS6.5AI score0.01947EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2003/03/27 7:43 p.m.53 views

Critical: Red Hat Security Advisory: krb5 security update

Updated kerberos packages fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped by Red Hat. An integer signedness error in the...

9.8CVSS7.4AI score0.15031EPSS
SaveExploits1References6
Debian
Debian
added 2003/03/26 12:1 p.m.45 views

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...

7.5CVSS0.8AI score0.04284EPSS
SaveExploits0
Debian
Debian
added 2003/03/26 12:1 p.m.32 views

[SECURITY] [DSA 269-1] New heimdal packages fix authentication failure

-------------------------------------------------------------------------- Debian Security Advisory DSA 269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 26th, 2003 http://www.debian.org/security/faq -...

7.5CVSS9.4AI score0.04284EPSS
SaveExploits0
OSV
OSV
added 2003/03/26 12:0 a.m.18 views

DSA-269 heimdal - Cryptographic weakness

Bulletin has no description...

7.5CVSS6.3AI score0.04284EPSS
SaveExploits0
OSV
OSV
added 2003/03/24 5:0 a.m.2 views

DEBIAN-CVE-2003-0138

Version 4 of the Kerberos protocol krb4, as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack...

7.5CVSS8.8AI score0.04284EPSS
SaveExploits0References1
OSV
OSV
added 2003/03/24 12:0 a.m.37 views

DSA-266 krb5 - several vulnerabilities

Bulletin has no description...

7.5CVSS9.4AI score0.15031EPSS
SaveExploits1
securityvulns
securityvulns
added 2003/03/17 12:0 a.m.41 views

MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2003-004 2003-03-17 Topic: Cryptographic weaknesses in Kerberos v4 protocol Severity: CRITICAL SUMMARY ======= A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to...

0.1AI score
SaveExploits0
OSV
OSV
added 2003/02/19 5:0 a.m.5 views

DEBIAN-CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...

7.5CVSS6.9AI score0.03554EPSS
SaveExploits0References1
OSV
OSV
added 2003/02/19 5:0 a.m.13 views

CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...

6.6AI score
SaveExploits0References13
NVD
NVD
added 2003/02/19 5:0 a.m.24 views

CVE-2003-0059

Unknown vulnerability in the chktrans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys...

7.5CVSS6.4AI score0.03554EPSS
SaveExploits0References9
CERT
CERT
added 2003/01/31 12:0 a.m.29 views

MIT Kerberos V5 allows inter-realm user impersonation by malicious realm controllers with shared keys

Overview MIT Kerberos V5 contains a flaw that allows the controller of one Kerberos realm to impersonate users in a second realm. Description MIT Kerberos V5 releases prior to 1.2.3 contain a vulnerability that allows users from one realm to impersonate users from other non-local realms that use...

7.5CVSS9.6AI score0.03554EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2002/03/09 5:0 a.m.25 views

CVE-1999-1099

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user...

6.2AI score0.0132EPSS
SaveExploits0References2
NVD
NVD
added 1996/11/22 5:0 a.m.10 views

CVE-1999-1099

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user...

5CVSS0.0132EPSS
SaveExploits0References2
Rows per page
Query Builder