USN-3353-1 heimdal vulnerability

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that Heimdal clients incorrectly trusted unauthenticated portions of Kerberos tickets. A remote attacker could use this to impersonate trusted network services or perform other attacks...

The Slippery Slope Starts with "Get 2 Free Airline Tickets"

Written by Or Katz and Raviv Perets A widespread phishing scam that offers free airline tickets has been spotted in the wild by Akamai's Enterprise Threat Protector ETP security research team. The campaign uses a number of social engineering techniques to trick people into providing their private...

services.airtickets.com XSS vulnerability

Vulnerable URL: http://services.airtickets.com/newsletter.asp?countryMobilePhoneCodeID=a'aa""...

baltimoreticketsales.com XSS vulnerability

Vulnerable URL: https://www.baltimoreticketsales.com/tickets.php?/Ugly-God/The-Fillmore-Silver-Spring-MD/=1"...

philadelphiaboxoffice.com XSS vulnerability

Vulnerable URL: https://www.philadelphiaboxoffice.com/tickets.php?/Queen-and-Adam-Lambert/Wells-Fargo-CenterPA-PA/=1"...

kansascityboxoffice.com XSS vulnerability

Vulnerable URL: https://www.kansascityboxoffice.com/tickets.php?/Naked-Magicians-18+-Event/Uptown-Theater-Kansas-City-MO/=1"...

houstonboxoffice.com XSS vulnerability

Vulnerable URL: https://www.houstonboxoffice.com/tickets.php?/Guy,-Monica,-112/Smart-Financial-Centre-TX/=1"...

charlotteticketsales.com XSS vulnerability

Vulnerable URL: https://www.charlotteticketsales.com/tickets.php?/Laugh-My-Pain-Away-feat.-Bruce-Bruce,-Luenell,-and-Kounty-Wayne/Greensboro-Coliseum-Complex-NC/=1"...

losangelesboxoffice.com XSS vulnerability

Vulnerable URL: https://www.losangelesboxoffice.com/tickets.php?/BET-Experience-feat.-Bryson-Tiller,-Jhene-Aiko,-Keyshia-Cole/Staples-Center-CA/=1"...

austinticketsales.com XSS vulnerability

Vulnerable URL: https://www.austinticketsales.com/tickets.php?/Whose-Live-Anyway?/Bass-Concert-Hall-TX/=1"...

UBUNTU-CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and...

RedHat Update for samba RHSA-2017:1265-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20170321)

Security Fixes : - It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. CVE-2016-2125 - A flaw was found in t...

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users...

F5 TLS Session Ticket Implementation Remote Memory Disclosure (Ticketbleed) (uncredentialed check)

Based on its response to a resumed TLS connection, the remote service appears to be affected by an information disclosure vulnerability, known as Ticketbeed, in the TLS Session Ticket implementation. The issue is due to the server incorrectly echoing back 32 bytes of memory, even if the Session I...

CVE-2016-9244

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer SSL session IDs from other sessions. It is possible...