Lucene search
K

4159 matches found

OSV
OSV
added 2010/01/20 12:0 a.m.31 views

DSA-1974-1 gzip - arbitrary code execution

Bulletin has no description...

6.8CVSS8.8AI score0.2707EPSS
Exploits1
OpenVAS
OpenVAS
added 2010/01/20 12:0 a.m.30 views

MIT Kerberos5 Multiple Integer Underflow Vulnerabilities

MIT Kerberos5 is prone to multiple integer underflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS6.8AI score0.16485EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2010/01/20 12:0 a.m.36 views

SuSE 11 Security Update : Kerberos 5 (SAT Patch Number 1796)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer underflow that leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

10CVSS6.2AI score0.16485EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2010/01/20 12:0 a.m.33 views

openSUSE Security Update : krb5 (krb5-1792)

Specially crafted ticket requests could crash the kerberos server CVE-2009-3295. Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer underflow that leads to heap memory corruption CVE-2009-4212. %NASLMINLEVEL 70300 C Tenable Network Security,...

10CVSS6.3AI score0.16485EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2010/01/19 12:0 a.m.19 views

CentOS Update for krb5-devel CESA-2010:0029 centos3 i386

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0029 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

10CVSS6.8AI score0.16485EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/01/19 12:0 a.m.29 views

CentOS Update for krb5-devel CESA-2010:0029 centos3 x86_64

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0029 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

10CVSS6.1AI score0.16485EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/01/19 12:0 a.m.19 views

CentOS Update for krb5-devel CESA-2010:0029 centos3 i386

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0029 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

10CVSS6.1AI score0.16485EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/01/19 12:0 a.m.17 views

CentOS Update for krb5-devel CESA-2010:0029 centos4 x86_64

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2010:0029 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

10CVSS6.1AI score0.16485EPSS
Exploits0References2
securityvulns
securityvulns
added 2010/01/17 12:0 a.m.67 views

MITKRB5-SA-2009-004 [CVE-2009-4212] integer underflow in AES and RC4 decryption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2009-004 MIT krb5 Security Advisory 2009-004 Original release: 2010-01-12 Topic: integer underflow in AES and RC4 decryption CVE-2009-4212 integer underflow in AES and RC4 decryption CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:...

10CVSS7.1AI score0.16485EPSS
Exploits0
NVD
NVD
added 2010/01/13 7:30 p.m.13 views

CVE-2009-4212

Multiple integer underflows in the 1 AES and 2 RC4 decryption functionality in the crypto library in MIT Kerberos 5 aka krb5 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by providing ciphertext with a...

10CVSS8.1AI score0.16485EPSS
Exploits0References31
CVE
CVE
added 2010/01/13 7:0 p.m.91 views

CVE-2009-4212

CVE-2009-4212 affects MIT Kerberos 5 (krb5) crypto library, impacting the AES and RC4 decryption paths. Versions 1.3–1.6.3 and 1.7 before 1.7.1 are vulnerable to multiple integer underflows when processing ciphertext that is too short to be valid. This can cause a daemon crash (DoS) and, in some ...

10CVSS7.2AI score0.16485EPSS
Exploits0References31Affected Software2
Cent OS
Cent OS
added 2010/01/13 12:51 a.m.69 views

krb5 security update

CentOS Errata and Security Advisory CESA-2010:0029 Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.2, and 5.3 Extended Update Support. This update has been rated as having critical security...

10CVSS6.8AI score0.16485EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2010/01/13 12:0 a.m.29 views

CentOS 3 / 4 / 5 : krb5 (CESA-2010:0029)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.2, and 5.3 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos...

10CVSS7.2AI score0.16485EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2010/01/13 12:0 a.m.30 views

RHEL 3 / 4 / 5 : krb5 (RHSA-2010:0029)

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.2, and 5.3 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos...

10CVSS7.2AI score0.16485EPSS
Exploits0References4
Debian
Debian
added 2010/01/12 9:36 p.m.24 views

[SECURITY] [DSA-1969-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1969-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 12, 2010 http://www.debian.org/security/faq -...

10CVSS7.3AI score0.16485EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2010/01/12 9:16 p.m.41 views

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5, and Red Hat Enterprise Linux 4.7, 5.2, and 5.3 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos...

10CVSS6.8AI score0.16485EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2010/01/12 9:16 p.m.5 views

krb: KDC integer overflows in AES and RC4 decryption routines (MITKRB5-SA-2009-004)

Multiple integer underflows in the 1 AES and 2 RC4 decryption functionality in the crypto library in MIT Kerberos 5 aka krb5 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code by providing ciphertext with a...

10CVSS7AI score0.16485EPSS
Exploits0References4
seebug.org
seebug.org
added 2009/12/21 12:0 a.m.14 views

WebSphere 7.05 APR-util apr_strmatch_precompile 导致整形下溢漏洞

No description provided by source...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2009/12/10 12:0 a.m.27 views

Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. OpenVAS Vulnerability Test $Id: mdksa2009319.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:319 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

10CVSS1.2AI score0.11552EPSS
Exploits3
OpenVAS
OpenVAS
added 2009/11/17 12:0 a.m.232 views

Fedora Core 10 FEDORA-2009-11488 (qt)

The remote host is missing an update to qt announced via advisory FEDORA-2009-11488. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

9.3CVSS6.8AI score0.12201EPSS
Exploits3References3
Rows per page
Query Builder