Moderate: Red Hat Security Advisory: krb5 security update

Updated Kerberos krb5 packages that correct a buffer overflow bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Kerberos is a networked authentication system that uses a trusted third party a...

USN-58-1: MIT Kerberos server vulnerability

Michael Tautschnig discovered a possible buffer overflow in the addtohistory function in the MIT Kerberos 5 implementation. Performing a password change did not properly track the password policy's history count and the maximum number of keys. This could cause an array overflow and may have allow...

CVE-2004-0642

MIT Kerberos 5 (krb5) is affected by CVE-2004-0642 due to double-free vulnerabilities in the ASN.1 decoder error handling for both the KDC library and the krb5 client library (versions 1.3.4 and earlier). The issue can allow remote attackers to execute arbitrary code, potentially compromising the...

MIT Kerberos 5 ASN.1 decoding functions insecurely deallocate memory (double-free)

Overview The MIT Kerberos 5 library does not securely deallocate heap memory when decoding ASN.1 structures, resulting in double-free vulnerabilities. An unauthenticated, remote attacker could execute arbitrary code on a KDC server, which could compromise an entire Kerberos realm. An attacker may...

CVE-2003-0058

MIT Kerberos V5 KDC before 1.2.5 is vulnerable to remote authenticated DoS via a protocol request that triggers a null pointer dereference, causing KDC crashes within the same realm. Affected component: KDC in MIT Kerberos V5. Impact: service denial (crash) of KDCs in the realm. Root cause: null ...

MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2004-003 Original release: 2004-08-31 Topic: ASN.1 decoder denial of service Severity: serious SUMMARY ======= The ASN.1 decoder library in the MIT Kerberos 5 distribution is vulnerable to a denial-of-service attack causing an infinite...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that improve client responsiveness and fix several security issues are now available for Red Hat Enterprise Linux 3. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. Several double-free bug...

krb5 -- ASN.1 decoder denial-of-service vulnerability

An advisory published by the MIT Kerberos team says: The ASN.1 decoder library in the MIT Kerberos 5 distribution is vulnerable to a denial-of-service attack causing an infinite loop in the decoder. The KDC is vulnerable to this attack. An unauthenticated remote attacker can cause a KDC or...

krb5 -- double-free vulnerabilities

An advisory published by the MIT Kerberos team says: The MIT Kerberos 5 implementation's Key Distribution Center KDC program contains a double-free vulnerability that potentially allows a remote attacker to execute arbitrary code. Compromise of a KDC host compromises the security of the entire...

Mandrake Linux Security Advisory : krb5 (MDKSA-2003:043-1)

Multiple vulnerabilities have been found in the Kerberos network authentication system. The MIT Kerberos team have released an advisory detailing these vulnerabilities, a description of which follows. An integer signedness error in the ASN.1 decoder before version 1.2.5 allows remote attackers to...

Incorrect cross-realm trust handling in Heimdal

Heimdal does not correctly validate the transited' field of Kerberos tickets when computing the authentication path. This could allow a rogue KDC with which cross-realm relationships have been established to impersonate any KDC in the authentication path...

CVE-2003-0072

CVE-2003-0072 describes a remote, authenticated denial-of-service in the Kerberos 5 Key Distribution Center (KDC) for krb5 1.2.7 and earlier. A specific protocol request can trigger an out-of-bounds read of an array, crashing KDCs within the same realm. Connected advisories reference this CVE amo...

CVE-2003-0082

The CVE-2003-0082 issue affects the KDC in Kerberos 5 (krb5) 1.2.7 and earlier. A remote, authenticated attacker can trigger a protocol request that causes the KDC to corrupt its heap (buffer underrun), leading to a denial of service (KDC crash) within the same realm. The connected advisories con...

MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2003-004 2003-03-17 Topic: Cryptographic weaknesses in Kerberos v4 protocol Severity: CRITICAL SUMMARY ======= A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to...

DEBIAN-CVE-2003-0058

MIT Kerberos V5 Key Distribution Center KDC before 1.2.5 allows remote authenticated attackers to cause a denial of service crash on KDCs within the same realm via a certain protocol request that causes a null dereference...

CVE-2003-0060

CVE-2003-0060 describes a format-string vulnerability in the MIT Kerberos V5 KDC logging routines prior to version 1.2.5. The issue allows remote attackers to trigger a denial of service (crash) and, potentially, to execute arbitrary code via format string specifiers in Kerberos principal names. ...

MIT Kerberos V5 KDC logging routines use unsafe format strings

Overview Early releases of the MIT Kerberos V5 KDC contain format string vulnerabilities that can be used by unauthenticated remote attackers to conduct denial of service attacks on KDC servers. Description Logging routines in some unspecified versions of the MIT Kerberos V5 Key Distribution Cent...

Critical: Red Hat Security Advisory: krb5 security update

A remotely exploitable stack buffer overflow has been found in the Kerberos v4 compatibility administration daemon distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 09 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Kerberos is a network authentication...

CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...

DEBIAN-CVE-2002-1226

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the 1 kadmind and 2 kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows CVE-2002-1225...