EUVD-2009-1928

Malware in sbrugna...

Fedora 20 : krb5-1.11.3-32.fc20 (2013-21456)

This update incorporates a bug fix to properly reject more invalid names for credential caches, and the fix for CVE-2013-1417, which could cause a KDC to attempt to dereference a NULL pointer. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

CVE-2009-1933

CVE-2009-1933 affects Sun Solaris 8/9/10 and OpenSolaris prior to snv_117, where Kerberos credential caches are not managed correctly. The root cause is improper handling of Kerberos credentials, enabling local users to access Kerberized NFS mount points and shares via unspecified vectors. Impact...