MIT Kerberos 5 recvauth Denial Of Service (CVE-2014-5355)

A denial of service vulnerability exists in MIT Kerberos 5. The vulnerability occurs when recvauthcommon calls krb5readmessage to receive and process a crafted message causing it to return an invalid string that later causes a NULL pointer dereference or an attempt to read beyond the end of a...

Kerberos klogind Remote Overflow

The remote klogind seems to be affected by a buffer overflow vulnerability involving its 'krbrdreq' library function that may also affect other Kerberos-related programs. An attacker may use this to gain a root shell on this host. C Tenable Network Security, Inc. include"compat.inc"; if descripti...