CentOS Update for krb5-devel CESA-2008:0181 centos3 i386

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2008:0181 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CentOS Update for krb5 CESA-2008:0181-01 centos2 i386

Check for the Version of krb5 OpenVAS Vulnerability Test CentOS Update for krb5 CESA-2008:0181-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for krb5-devel CESA-2008:0181 centos3 x86_64

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2008:0181 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386

Check for the Version of XFree86 OpenVAS Vulnerability Test CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for XFree86-100dpi-fonts CESA-2008:0502 centos3 x86_64

Check for the Version of XFree86-100dpi-fonts OpenVAS Vulnerability Test CentOS Update for XFree86-100dpi-fonts CESA-2008:0502 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CentOS Update for xorg-x11 CESA-2008:0503 centos4 i386

Check for the Version of xorg-x11 OpenVAS Vulnerability Test CentOS Update for xorg-x11 CESA-2008:0503 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for XFree86-100dpi-fonts CESA-2008:0502 centos3 x86_64

Check for the Version of XFree86-100dpi-fonts OpenVAS Vulnerability Test CentOS Update for XFree86-100dpi-fonts CESA-2008:0502 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386

Check for the Version of XFree86 OpenVAS Vulnerability Test CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for xorg-x11 CESA-2008:0503 centos4 i386

Check for the Version of xorg-x11 OpenVAS Vulnerability Test CentOS Update for xorg-x11 CESA-2008:0503 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MIT Lincoln Lab releases network security tool

MIT Lincoln Laboratory has developed a Network Security Analysis application known as NetSPA to help identify potential avenues of attack in computer networks. NetSPA for Network Security Planning Architecture uses information about networks and the individual machines and programs running on the...

CVE-2009-0360

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid...

Code injection

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid...

CVE-2009-0360

CVE-2009-0360 affects the PAM Kerberos library (pam-krb5) when linked against MIT Kerberos, where improper initialization for setuid use allows a local attacker to gain privileges by pointing an environment variable to a modified Kerberos config file and launching a PAM-based setuid application. ...

CVE-2009-0360

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid...

pam-krb5 API使用本地权限提升漏洞

BUGTRAQ ID: 33740 CVECAN ID: CVE-2009-0360 pam-krb5提供了支持认证、授权、用户票据缓存处理等功能的Kerberos v5 PAM模块。 当链接到MIT Kerberos时，pam-krb5没有对在setuid环境中初始化Kerberos库使用正确的API，也就是MIT Kerberos库会信任环境变量来锁定Kerberos配置。攻击者可以利用这个漏洞绕过使用PAM进行认证的setuid应用程序所执行的认证检查，获得权限提升。如果pam-krb5链接到了Heimdal Kerberos实现就不会出现这个问题。 Russ Allbery...

Debian Security Advisory DSA 1721-1 (libpam-krb5)

The remote host is missing an update to libpam-krb5 announced via advisory DSA 1721-1. OpenVAS Vulnerability Test $Id: deb17211.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1721-1 libpam-krb5 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0360: Improper Authentication

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries for setuid use, which allows local users to gain privileges by pointing an environment variable to a modified Kerberos configuration file, and then launching a PAM-based setuid...

Debian DSA-1721-1 : libpam-krb5 - several vulnerabilities

Several local vulnerabilities have been discovered in the PAM module for MIT Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0360 Russ Allbery discovered that the Kerberos PAM module parsed configuration settings from environment variables...

pam-krb5 security advisory (3.12 and earlier)

pam-krb5 security vulnerability Vulerability type: Local privilege escalation, local file overwrite Versions affected: All versions prior to 3.13 Versions fixed: 3.13 and later Reported: 2009-01-29 Public announcement: 2009-02-11 CVE IDs: CVE-2009-0360, CVE-2009-0361 A security vulnerability in...

[SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1721-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...