52 matches found
MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-006 MIT krb5 Security Advisory 2011-006 Original release: 2011-10-18 Last update: 2011-10-18 Topic: KDC denial of service vulnerabilities CVE-2011-1527: null pointer dereference in KDC LDAP back end CVSSv2 Vector:...
Fedora 14 : krb5-appl-1.0.1-4.fc14 (2011-9109)
This update corrects a potential failure to properly set the effective group ID in the GSSAPI-capable FTP server MITKRB5-SA-2011-005, CVE-2011-1526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-005 MIT krb5 Security Advisory 2011-005 Original release: 2011-07-05 Topic: FTP daemon fails to set effective group ID CVE-2011-1526 CVSSv2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:H/RL:O/RC:C CVSSv2 Base Score: 6.5 Access Vector: Network...
Security fix for the ALT Linux 9 package krb5 version 1.6.3-alt13
July 6, 2011 Ivan A. Melnikov 1.6.3-alt13 - check if ftp daemon fails to set effective group id MITKRB5-SA-2011-005, CVE-2011-1526...
RHEL 6 : krb5-appl (RHSA-2011:0920)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0920 advisory. The krb5-appl packages provide Kerberos-aware telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as...
Security fix for the ALT Linux 8 package krb5 version 1.6.3-alt13
July 6, 2011 Ivan A. Melnikov 1.6.3-alt13 - check if ftp daemon fails to set effective group id MITKRB5-SA-2011-005, CVE-2011-1526...
krb5-appl security update
1.0.1-2.1 - ftpd: add candidate patch to detect setegid/setregid/setresgid and check for errors when calling them MITKRB5-SA-2011-005, CVE-2011-1526, 713341...
FreeBSD Ports: krb5
The remote host is missing an update to the system as announced in the referenced advisory. VID 7edac52a-66cd-11e0-9398-5d45f3aa24f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7edac52a-66cd-11e0-9398-5d45f3aa24f0 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Fedora 14 : krb5-1.8.2-10.fc14 (2011-5345)
This update incorporates the upstream patches to fix an attempt to free an invalid pointer in kadmind MITKRB5-SA-2011-004. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
RHEL 6 : krb5 (RHSA-2011:0447)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0447 advisory. - krb5: kadmind invalid pointer free MITKRB5-SA-004 CVE-2011-0285 Note that Nessus has not tested for this issue but has instead relied only on the...
FreeBSD : krb5 -- MITKRB5-SA-2011-003, KDC vulnerable to double-free when PKINIT enabled (7edac52a-66cd-11e0-9398-5d45f3aa24f0)
An advisory published by the MIT Kerberos team says : The MIT Kerberos 5 Key Distribution Center KDC daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication PKINIT capability is enabled, resulting in daemon crash or arbitrary code execution which ...
Fedora 13 : krb5-1.7.1-18.fc13 (2011-3464)
This update incorporates upstream fixes for a double-free in the KDC which could occur if the KDC needed to send back typed-data along with an error MITKRB5-SA-2011-003, CVE-2011-0284. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...
Fedora 14 : krb5-1.8.2-8.fc14 (2011-1225)
This update incorporates fixes from upstream advisories MITKRB5-SA-2011-001 standalone kpropd exits if a per-client child exits with an error and MITKRB5-SA-2011-002 uninitialized pointer crash in the KDC, hang or crash in the KDC with the LDAP backend. Note that Tenable Network Security has...
krb5 security update
1.8.2-3.4 - add upstream patches to fix standalone kpropd exiting if the per-client child process exits with an error, and hang or crash in the KDC when using the LDAP kdb backend CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, 671101 1.8.2-3.3 - pull up crypto changes made between 1.8.2 and 1.8.3 t...
krb5 -- MITKRB5-SA-2011-002, KDC vulnerable to hang when using LDAP back end
An advisory published by the MIT Kerberos team says: The MIT krb5 Key Distribution Center KDC daemon is vulnerable to denial of service attacks from unauthenticated remote attackers. CVE-2011-0281 and CVE-2011-0282 occur only in KDCs using LDAP back ends, but CVE-2011-0283 occurs in all krb5-1.9...
FreeBSD Ports: krb5
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora 13 : krb5-1.7.1-16.fc13 (2010-18425)
This update incorporates the upstream patches to correct bugs outlined in MITKRB5-SA-2010-007 CVE-2010-1323, CVE-2010-1324, and CVE-2010-4020. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 14 : krb5-1.8.2-7.fc14 (2010-18409)
This update incorporates the upstream patches to correct bugs outlined in MITKRB5-SA-2010-007 CVE-2010-1323, CVE-2010-1324, and CVE-2010-4020. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
RHEL 5 : java-1.4.2-ibm (RHSA-2010:0935)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0935 advisory. - krb5: null pointer dereference in GSS-API library leads to DoS MITKRB5-SA-2010-005 CVE-2010-1321 - OpenJDK HttpURLConnection incomplete...