143 matches found
FreeBSD : krb5-appl -- telnetd code execution vulnerability (4ddc78dc-300a-11e1-a2aa-0016ce01e285)
The MIT Kerberos Team reports : When an encryption key is supplied via the TELNET protocol, its length is not validated before the key is copied into a fixed-size buffer. Also see MITKRB5-SA-2011-008. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
[SECURITY] [DSA 2375-1] krb5. krb5-appl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2375-1 [email protected] http://www.debian.org/security/ Florian Weimer December 26, 2011 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2283-1 (krb5-appl)
The remote host is missing an update to krb5-appl announced via advisory DSA 2283-1. OpenVAS Vulnerability Test $Id: deb22831.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2283-1 krb5-appl Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2283-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Update for krb5-appl MDVSA-2011:117 (krb5-appl)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for krb5-appl MDVSA-2011:117 (krb5-appl)
Check for the Version of krb5-appl OpenVAS Vulnerability Test Mandriva Update for krb5-appl MDVSA-2011:117 krb5-appl Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Debian DSA-2283-1 : krb5-appl - programming error
Tim Zingelmann discovered that due an incorrect configure script the kerborised FTP server failed to set the effective GID correctly, resulting in privilege escalation. The oldstable distribution lenny is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
[SECURITY] [DSA 2283-1] krb5-appl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2283-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...
DSA-2283-1 krb5-appl - programming error
Bulletin has no description...
Mandriva Linux Security Advisory : krb5-appl (MDVSA-2011:117)
A vulnerability was discovered and corrected in krb5-appl : ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications aka krb5-appl 1.0.1 and earlier does not check the krb5setegid return value, which allows remote authenticated users to bypass intended group access restrictions, an...
Fedora Update for krb5-appl FEDORA-2011-9109
Check for the Version of krb5-appl OpenVAS Vulnerability Test Fedora Update for krb5-appl FEDORA-2011-9109 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for krb5-appl FEDORA-2011-9080
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for krb5-appl FEDORA-2011-9109
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 14 : krb5-appl-1.0.1-4.fc14 (2011-9109)
This update corrects a potential failure to properly set the effective group ID in the GSSAPI-capable FTP server MITKRB5-SA-2011-005, CVE-2011-1526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Fedora 15 : krb5-appl-1.0.1-7.fc15 (2011-9080)
This update corrects a potential failure to properly set the effective group ID in the GSSAPI-capable FTP server MITKRB5-SA-2011-005, CVE-2011-1526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
CVE-2011-1526
The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...
MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-005 MIT krb5 Security Advisory 2011-005 Original release: 2011-07-05 Topic: FTP daemon fails to set effective group ID CVE-2011-1526 CVSSv2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:H/RL:O/RC:C CVSSv2 Base Score: 6.5 Access Vector: Network...
RHEL 6 : krb5-appl (RHSA-2011:0920)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0920 advisory. The krb5-appl packages provide Kerberos-aware telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as...
Important: Red Hat Security Advisory: krb5-appl security update
Updated krb5-appl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
