24 matches found
CVE-2007-0957
CVE-2007-0957 involves a stack-based buffer overflow in the krb5_klog_syslog function of the MIT Kerberos 5 kadm5 library used by kadmind and the KDC. The vulnerability arises from a boundary/format handling issue, enabling remote authenticated users to execute arbitrary code and modify the Kerbe...
CVE-2007-1216
Double free vulnerability in the GSS-API library lib/gssapi/krb5/k5unseal.c, as used by the Kerberos administration daemon kadmind in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSECGSS RPC library, allows remote authenticated users to execute arbitrary code...
CVE-2007-1216: Double Free
Double free vulnerability in the GSS-API library lib/gssapi/krb5/k5unseal.c, as used by the Kerberos administration daemon kadmind in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSECGSS RPC library, allows remote authenticated users to execute arbitrary code...
PT-1999-1482 · Ibm · Ibm Websphere
Name of the Vulnerable Software and Affected Versions: IBM WebSphere affected versions not specified Description: The issue concerns the use of weak encryption by the IBM WebSphere ikeyman tool to store a password for a key database used in SSL connections. Recommendations: At the moment, there i...