CVE-2018-11785: Missing Authorization

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query...

PT-2018-10819

Name of the Vulnerable Software and Affected Versions Apache Impala versions prior to 3.0.1 Description The issue is related to a missing authorization check, allowing a Kerberos-authenticated but unauthorized user to inject random data into a running query. This can lead to incorrect results for...

[SECURITY] [DSA 4159-1] remctl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4159-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2018 https://www.debian.org/security/faq -...

CVE-2015-5913

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

Cross site request forgery (csrf)

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...

CVE-2015-5913

The CVE-2015-5913 entry affects Heimdal Kerberos as used by Apple OS X before 10.11. The underlying issue allows remote attackers to perform replay attacks against the SMB server by sending packet data that corresponds to a Kerberos-authenticated request. Affected environment is OS X prior to 10....

PT-2015-2296

Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 10.11 Description The issue is related to inadequate access control in the Heimdal component of the Mac OS X operating system. It allows a remote attacker to conduct replay attacks against the SMB server by exploiting...

CVE-2015-5913: Improper Access Control

Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request...