CVE-2001-0034

KTH Kerberos IV is affected by a local privilege issue where the krb4_proxy variable can be used to specify an alternate proxy, enabling a user to generate false proxy responses and potentially gain privileges. The vulnerability is local in scope, with impact described as complete confidentiality...

CVE-2001-0034

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0035

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2001-0033: Undefined Security Weakness

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0036: Undefined Security Weakness

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...

CVE-2001-0035: Undefined Security Weakness

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

CVE-2001-0034: Undefined Security Weakness

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0033

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges...

CVE-2001-0034

KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...

CVE-2001-0036

KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...

CVE-2001-0035

Buffer overflow in the kdcreplycipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request...

Security Advisory FreeBSD-SA-01:25.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:25 Security Advisory FreeBSD, Inc. Topic: Local and remote vulnerabilities in Kerberos IV Category: core Module: libkrb, telnetd Announced: 2001-02-14 Credits: Jouko...

Серьезные дырки в KTH Kerberos IV

Пользователь может указать krb4proxy для перенаправления запроса на авторизацию собственному прокси-серверу. В сочетании с переполнением буфера это дает возможность удаленного root-доступа. Локальный пользователь может указать собственные конфигурационные файлы, которые будут использованы для...

FreeBSD-SA-01:25.kerberosIV

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:25 Security Advisory FreeBSD, Inc. Topic: Local and remote vulnerabilities in Kerberos IV Category: core Module: libkrb, telnetd Announced: 2001-02-14 Credits: Jouko...

Vulnerabilities in KTH Kerberos IV

OVERVIEW Kerberos is a network authentication protocol which by using secret-key cryptography provides authentication over insecure networks. There are at least two common free Kerberos implementations: MIT and KTH Royal Institute of Techology, Sweden. The latter is included in OpenBSD and FreeBS...

Linux news 18.10.00

Linux kernel 2.4.0-test10-pre3 is out Выпущен Linux kernel 2.4.0-test10-pre3. В этой версии добавлена поддержка/распознавание Pentium IV и чипсета i815. Исправлены найденные ошибки, включая memory corruption в RPC. Улучшена поддержка USB, и в частности, исправлены проблемы со спинлоками в USB...

CVE-1999-1296

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRBCONF environmental variable...