CVE-2002-1235: Undefined Security Weakness

The kadmserin function in 1 the Kerberos v4compatibility administration daemon kadmind4 in the MIT Kerberos 5 krb5 krb5-1.2.6 and earlier, 2 kadmind in KTH Kerberos 4 eBones before 1.2.1, and 3 kadmind in KTH Kerberos 5 Heimdal before 0.5.1 when compiled with Kerberos 4 support, does not properly...

MIT Kerberos V5 KDC vulnerable to denial-of-service via null pointer dereference

Overview A vulnerability exists in MIT Kerberos V5 Key Distribution Center that may allow attackers to crash multiple KDC servers within the same realm. Description The MIT Kerberos V5 Key Distribution Center KDC contains a vulnerability that allows certain protocol requests to crash the KDC by...

MITKRB5-SA-2002-001: Remote root vulnerability in MIT krb5 admin system

-----BEGIN PGP SIGNED MESSAGE----- MIT krb5 Security Advisory 2002-001 2002-08-02 Topic: Remote root vulnerability in MIT krb5 admin system Severity: Remote user may be able to gain root access to a KDC host. SUMMARY ======= There is an integer overflow bug in the SUNRPC-derived RPC library used ...

MIT PGP Public Key Server 0.9.20.9.4 - Search String Remote Buffer Overflow

MIT PGP Public Key Server 0.9.20.9.4 - Search String Remote Buffer Overflow source: https://www.securityfocus.com/bid/4828/info The PGP Public Key Server is a freely available, open source software package distributed by MIT. It is designed for use on Linux and Unix operating systems. The PGP...

CVE-2001-1323

CVE-2001-1323 concerns a buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier triggered by base-64 encoded data during radix_encode processing of FTP glob output in the gssapi-enabled ftpd. The underlying issue is a missing bounds check in the ftpglob/radix_encode handling, enabling potenti...

CVE-2001-1323

Buffer overflow in MIT Kerberos 5 krb5 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radixencode function processes file glob output from the ftpglob function...

CVE-2001-1323: Buffer Copy without Checking Size of Input

Buffer overflow in MIT Kerberos 5 krb5 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radixencode function processes file glob output from the ftpglob function...

Security Update: [CSSA-2002-SCO.14] Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: Open UNIX 8.0.0 UnixWare 7.1.1 : X server allows access to any shared memory on the system Advisory number: CSSA-2002-SCO.14 Issue date: 2002 April 08 Cross...

CVE-2002-0164

CVE-2002-0164 describes a local vulnerability in the MIT-SHM extension of XFree86 (affecting XFree86 4.2.1 and earlier) allowing a local user to read/write arbitrary shared memory, potentially enabling privilege escalation or denial of service. Documents from Debian, Red Hat, SCO/OpenServer advis...

CVE-2002-0164

Vulnerability in the MIT-SHM extension of the X server on Linux XFree86 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges...

CVE-2002-0164: Undefined Security Weakness

Vulnerability in the MIT-SHM extension of the X server on Linux XFree86 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges...

CVE-2002-0164

Vulnerability in the MIT-SHM extension of the X server on Linux XFree86 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges...

CVE-2001-1323

Buffer overflow in MIT Kerberos 5 krb5 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radixencode function processes file glob output from the ftpglob function...

CVE-2001-0191

Summary: CVE-2001-0191 affects gnuserv prior to 3.12 (shipped with XEmacs). The issue arises from improper checking of the length of the X Windows MIT-MAGIC-COOKIE, enabling remote attackers to execute arbitrary commands via a buffer overflow or to brute-force authentication with a short cookie l...

CVE-2001-0191: Buffer Copy without Checking Size of Input

gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length...

Security advisory: krb5 ftpd buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- KRB5 FTPD BUFFER OVERFLOWS 2001-04-25 SUMMARY: Buffer overflows exist in the FTP daemon included with MIT krb5. IMPACT: If anonymous FTP is enabled, a remote user may gain unauthorized root access. A user with access to a local account may gain unauthorized root...

Vulnerabilities in KTH Kerberos IV

OVERVIEW Kerberos is a network authentication protocol which by using secret-key cryptography provides authentication over insecure networks. There are at least two common free Kerberos implementations: MIT and KTH Royal Institute of Techology, Sweden. The latter is included in OpenBSD and FreeBS...

Серьезные уявзмиости в реализациях Kerberos

MIT Kerberos и ее порты содержат переполнение буфера в функции krbrdreq, которое позволяет удаленное выполнение кода. Кроме того, многочисленные переполнениея буфера позволяют DoS-атаки...

gssftp.txt

-----BEGIN PGP SIGNED MESSAGE----- REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON 2000-06-14 SUMMARY: A remote user may execute certain FTP commands without authorization. IMPACT: A remote user may perform denial of service attacks. An attacker with access to a local account may gain unauthorized roo...

Advisory CA-2000-11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CERT Advisory CA-2000-11 MIT Kerberos Vulnerable to Denial-of-Service Attacks Original release date: June 9, 2000 Last revised: -- Source: The MIT Kerberos Team, CERT/CC A complete revision history is at the end of this file. Systems Affected Systems...