Mandriva Linux Security Advisory : krb5 (MDVSA-2010:245)

A vulnerability was discovered and corrected in krb5 : An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of using a...

krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

krb5 -- multiple checksum handling vulnerabilities

The MIT Kerberos team reports: MIT krb5 clients incorrectly accept an unkeyed checksums in the SAM-2 preauthentication challenge. An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some...

SLES11: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount ldapsmb libsmbclient0 libtalloc1 libtdb1 libwbclient0 samba samba-client samba-krb-printing samba-winbind More details may also be found by...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-krb-printing samba-python samba-vscan samba-winbind More details...

SLES10: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount libmsrpc libmsrpc-devel libsmbclient libsmbclient-devel samba samba-client samba-krb-printing samba-python samba-vscan samba-winbind More details...

SLES11: Security update for Samba

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cifs-mount ldapsmb libsmbclient0 libtalloc1 libtdb1 libwbclient0 samba samba-client samba-krb-printing samba-winbind More details may also be found by...

Microsoft PKINIT smart card logon vulnerable to information disclosure and spoofing

Overview Microsoft PKINIT smart card authentication is vulnerable to an information disclosure flaw that may allow an attacker to spoof a trusted server. Description From the Microsoft PKINIT description: PKINIT is an Internet Engineering Task Force IETF Internet Draft for "Public Key Cryptograph...