CVE-2015-8631

Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...

CVE-2015-8629

The vulnerability CVE-2015-8629 affects MIT Kerberos 5 (krb5) kadmind: the xdr_nullstring function in kadm_rpc_xdr.c does not reliably verify presence of terminating '\0' in strings, allowing a remote authenticated user to trigger an out-of-bounds read that can disclose sensitive information or c...

CVE-2015-8631

CVE-2015-8631 affects MIT Kerberos 5 (krb5) kadmind; a memory leak caused by the code path in kadmin/server/server_stubs.c can be triggered by a request with a NULL principal name. The issue, described as a denial of service via memory exhaustion, occurs in krb5 builds prior to 1.13.4 and in 1.14...

CVE-2015-8629

The xdrnullstring function in lib/kadm5/kadmrpcxdr.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service...

CVE-2015-8630

The 1 kadm5createprincipal3 and 2 kadm5modifyprincipal functions in lib/kadm5/srv/svrprincipal.c in kadmind in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash b...

Моя музыка ВКонтакте - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Моя музыка ВКонтакте published at the 'play' market has multiple vulnerabilities...

EFF Alerts - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application EFF Alerts published at the 'play' market has multiple vulnerabilities...

MIT Develops Hack-Proof RFID Chip — Here's How It Works

Do you know about RFID chips and how many you are carrying at this moment? Today, RFID chips are built-in all sorts of items, including your credit cards, travel swipe cards, library books, grocery store cards, security tags, implanted medical records, passports and even the access cards provided...

Updated krb5 packages fix security vulnerability

In all versions of MIT krb5, an authenticated attacker can cause kadmind to read beyond the end of allocated memory by sending a string without a terminating zero byte. Information leakage may be possible for an attacker with permission to modify the database CVE-2015-8629. In MIT krb5 1.12 and...

[SECURITY] [DSA 3466-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3466-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2016 https://www.debian.org/security/faq -...

DSA-3466-1 krb5 - security update

Bulletin has no description...

Debian Security Advisory DSA 3466-1 (krb5 - security update)

Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-8629 It was discovered that an authenticated attacker can cause kadmind to read beyond the end of allocated memory by...

amps-web.mit.edu XSS vulnerability

Open Bug Bounty ID: OBB-131200 Description| Value ---|--- Affected Website:| amps-web.mit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

start.csail.mit.edu XSS vulnerability

Vulnerable URL: http://start.csail.mit.edu/startfarm.cgi?query=%22%3E%3C/title%3E%3Cscript/src=%22//www.xssposed.org/1.JS%22%3E%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.04.2017 Latest check for patch:| 21.04.2017 18:28 GMT Vulnerability type:| XSS Vulnerability status...

scripts.mit.edu XSS vulnerability

Vulnerable URL: http://scripts.mit.edu/2.670/schedulesubmit.php Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 790 Google Pagerank| 5 VIP website status:| Yes Check scripts.mit.edu SSL connection:| Grade: A+...

mit-kind.de Open Redirect vulnerability

Vulnerable URL: http://mit-kind.de/baseportal/links/baseportal.pl?htx=/verwitwet.de/links/aufruf=134=https://www.xssposed.org/=aufruf Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

mit-kind.de XSS vulnerability

Vulnerable URL: http://mit-kind.de/baseportal/links/baseportal.pl?htx=/verwitwet.de/links/aufruf=134=javascript:alert/XSSPOSED/=aufruf Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20151119)

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request. CVE-2014-5355 A flaw was found in t...

library.mit.edu Open Redirect vulnerability

Vulnerable URL: http://library.mit.edu/goto/https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 6 VIP websi...