188 matches found
Moderate: Red Hat Security Advisory: krb5 security update
Updated Kerberos krb5 packages that correct a buffer overflow bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system that uses a trusted third party a...
Critical: Red Hat Security Advisory: krb5 security update
Updated Kerberos krb5 packages that correct double-free and ASN.1 parsing bugs are now available for Red Hat Enterprise Linux. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. Several double-free bugs were found...
Fedora Core 1 : krb5-1.3.4-5 (2004-276)
Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. Several double-free bugs were found in the Kerberos 5 KDC and libraries. A remote attacker could potentially exploit these flaws to execute arbitrary code. The...
Fedora Core 2 : krb5-1.3.4-6 (2004-277)
Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. Several double-free bugs were found in the Kerberos 5 KDC and libraries. A remote attacker could potentially exploit these flaws to execute arbitrary code. The...
Mandrake Linux Security Advisory : krb5 (MDKSA-2002:057)
The network authentication system in Kerberos 5 contains an RPC library that includes an XDR decoder derived from Sun's RPC implementation. This implemenation is vulnerable to a heap overflow. With Kerberos, it is believed that an attacker would need to be able to successfully authenticate to...
ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass
ZaireWeb Solutions NewsLetter ZWS - Administrative Interface Authentication Bypass source: https://www.securityfocus.com/bid/10605/info Newsletter ZWS is reported prone to an administrative interface authentication bypass vulnerability. The vulnerability exists due to a design error in the...
Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force
Secure Computing e.iD Authenticator for Palm 2.0 - PIN Brute Force source: https://www.securityfocus.com/bid/2105/info Summary: An attacker that obtains access to the "sceiddb.pdb" file, part of Secure Computing's e.iD Authenticator for Palm, can determine the user's PIN. Problem Description:...