Debian DSA-2172-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in phpCAS, a CAS client library for PHP. The Moodle course management system includes a copy of phpCAS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

DSA-2164-1 shadow - missing input sanitization

Bulletin has no description...

DSA-2161-2 openjdk-6 - several

Bulletin has no description...

Mandriva Update for krb5 MDVSA-2011:024 (krb5)

Check for the Version of krb5 OpenVAS Vulnerability Test Mandriva Update for krb5 MDVSA-2011:024 krb5 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2011-0281

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

CVE-2011-0281

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

Code injection

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service NULL pointer dereference or buffer over-read, and...

Null pointer dereference

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

CVE-2011-0283

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

CVE-2011-0283

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

CVE-2011-0281

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

CVE-2011-0283

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

CVE-2011-0282

CVE-2011-0282 affects MIT Kerberos 5 KDC (krb5) when using an LDAP backend, with versions 1.6.x through 1.9. The vulnerability allows remote, unauthenticated attackers to cause a denial of service via a crafted principal name, triggering a NULL pointer dereference or a buffer over-read that can c...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:024)

Multiple vulnerabilities were discovered and corrected in krb5 : The MIT krb5 Key Distribution Center KDC daemon is vulnerable to denial of service attacks from unauthenticated remote attackers CVE-2011-0281, CVE-2011-0282. Packages for 2009.0 are provided as of the Extended Maintenance Program...

CVE-2011-0281

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

RHEL 5 : krb5 (RHSA-2011:0199)

Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

krb5: KDC crash when using LDAP backend caused by a special principal name (MITKRB5-SA-2011-002)

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service NULL pointer dereference or buffer over-read, and daemon crash via a crafted principal name...

DSA-2156-1 pcsc-lite - buffer overflow

Bulletin has no description...

Fake AV Scareware Passively Served

A piece of fake anti-virus scareware, Antivirus 8, has been infecting computers via ICQ in recent days according to Roel Schouwenberg at Securelist. What makes this fake antivirus popup intriguing is that it appears infecting users who are not actively using their computer. While most fake...