Oracle Linux 5 : Important: / krb5 (ELSA-2007-0892)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0892 advisory. 1.5-29 - update to revised patch for CVE-2007-3999 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...

openSUSE 10 Security Update : krb5 (krb5-4248)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 and CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

[SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1387 [email protected] http://www.debian.org/security/ Florian Weimer October 15th, 2007 http://www.debian.org/security/faq -...

RHEL 5 : krb5 (RHSA-2007:0892)

Updated krb5 packages that correct a security flaw are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate t...

CVE-2007-4743

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...

CVE-2007-4743

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does not correctly check the buffer length in some environments and architectures...