PT-2011-1163

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 krb5 versions 1.9 through 1.9.2-r1 MIT Kerberos 5 krb5 versions prior to 1.9.2-r1 Description The issue affects the Key Distribution Center KDC in MIT Kerberos 5, allowing remote attackers to cause a denial of service via a...

CVE-2011-0282: Undefined Security Weakness

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service NULL pointer dereference or buffer over-read, and daemon crash via a crafted principal name...

CVE-2011-0281: Undefined Security Weakness

The unparse implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service file descriptor exhaustion and daemon hang via a principal name that triggers use of a backslash escape...

CVE-2011-0283: Undefined Security Weakness

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a malformed request packet that does not trigger a response packet...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

krb5: KDC crash when using LDAP backend caused by a special principal name (MITKRB5-SA-2011-002)

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service NULL pointer dereference or buffer over-read, and daemon crash via a crafted principal name...

krb5 -- MITKRB5-SA-2011-001, kpropd denial of service

An advisory published by the MIT Kerberos team says: The MIT krb5 KDC database propagation daemon kpropd is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it can cause t...

PT-2011-1160

Name of the Vulnerable Software and Affected Versions mit-krb5 versions prior to 1.9.2 Description The issue affects the mit-krb5 package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur remotely. The...

PT-2011-1162

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.6.x through 1.9 mit-krb5 versions prior to 1.9.2-r1 Description The issue allows remote attackers to cause a denial of service, potentially leading to a daemon crash, via a crafted principal name when an LDAP backend ...

PT-2011-1161

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.6.x through 1.9 Description The issue allows remote attackers to cause a denial of service, specifically file descriptor exhaustion and daemon hang, when an LDAP backend is used in the Key Distribution Center KDC...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 4ccbd40d-03f7-11e0-bf50-001a926c7637 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4ccbd40d-03f7-11e0-bf50-001a926c7637 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 11bbccbc-03ee-11e0-bcdb-001fc61c2a55 OpenVAS Vulnerability Test $ Description: Auto generated from VID 11bbccbc-03ee-11e0-bcdb-001fc61c2a55 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 9f971cea-03f5-11e0-bf50-001a926c7637 OpenVAS Vulnerability Test $ Description: Auto generated from VID 9f971cea-03f5-11e0-bf50-001a926c7637 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 0d57c1d9-03f4-11e0-bf50-001a926c7637 OpenVAS Vulnerability Test $ Description: Auto generated from VID 0d57c1d9-03f4-11e0-bf50-001a926c7637 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

SuSE9 Security Update : IBM Java (YOU Patch Number 12669)

IBM Java 1.4.2 SR13 was updated to FP8 to fix various bugs and security issues. The following security issues were fixed : - The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 1d193bba-03f6-11e0-bf50-001a926c7637 OpenVAS Vulnerability Test $ Description: Auto generated from VID 1d193bba-03f6-11e0-bf50-001a926c7637 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...