Oracle Linux 5 : Important: / krb5 (ELSA-2007-0858)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0858 advisory. 1.5-28 - add preliminary patch to fix buffer overflow in rpcsecgss implementation in libgssrpc 250973, CVE-2007-3999 and write through uninitialized...

Oracle Linux 4 : nfs-utils-lib (ELSA-2007-0913)

From Red Hat Security Advisory 2007:0913 : An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support...

Scientific Linux Security Update : nfs-utils-lib on SL4.x i386/x86_64

Tenable Network Security discovered a stack-based buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On Red Hat Enterprise Linux 4 i...

Ubuntu Update for krb5, librpcsecgss vulnerability USN-511-1

Ubuntu Update for Linux kernel vulnerabilities USN-511-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5111.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for krb5, librpcsecgss vulnerability USN-511-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Fedora Update for krb5 FEDORA-2007-2066

Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2007-2066 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for krb5 FEDORA-2007-690

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200710-01 (librcpsecgss)

The remote host is missing updates announced in advisory GLSA 200710-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 1387-1 (librpcsecgss)

The remote host is missing an update to librpcsecgss announced via advisory DSA 1387-1. OpenVAS Vulnerability Test $Id: deb13871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1387-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1387-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1367-2 (krb5)

The remote host is missing an update to krb5 announced via advisory DSA 1367-2. OpenVAS Vulnerability Test $Id: deb13672.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1367-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : Kerberos (ZYPP Patch Number 4192)

This update of krb5 fixes two bugs in kadmind that can be used to execute arbitrary code remotely. CVE-2007-3999 / CVE-2007-4000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

SuSE 10 Security Update : librpcsecgss (ZYPP Patch Number 4601)

This update fixes a security problem in the librpcsecgss library used by NFSv4 also found in krb5. A invalid packet could underflow and potentially cause memory corruption and code execution. CVE-2007-3999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...

openSUSE 10 Security Update : librpcsecgss (librpcsecgss-4600)

This update fixes a security problem in the librpcsecgss library used by NFSv4 also found in krb5. A invalid packet could underflow and potentially cause memory corruption and code execution. CVE-2007-3999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Fedora 7 : krb5-1.6.1-4.fc7 (2007-2066)

The originally-used patch for CVE-2007-3999 didn't completely fix the bug. This update includes the revised patch. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Debian DSA-1387-1 : librpcsecgss - buffer overflow

It has been discovered that the original patch for a buffer overflow in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 CVE-2007-3999, DSA-1368-1 was insufficient to protect from arbitrary code execution in some environments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE 10 Security Update : krb5 (krb5-4191)

This update of krb5 fixes two bugs in kadmind that can be used to execute arbitrary code remotely. CVE-2007-3999, CVE-2007-4000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4191. The...

DSA-1387-1 librpcsecgss

Bulletin has no description...

Solaris 10 (sparc) : 126661-02

SunOS 5.10: rpcsec patch. Date this patch was last updated by Sun : Oct/12/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...