CVE-2015-2694

The kdcpreauth modules in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing 1 zero bytes of data or 2 an arbitrary realm name,...

CVE-2015-2694: Undefined Security Weakness

The kdcpreauth modules in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing 1 zero bytes of data or 2 an arbitrary realm name,...

PT-2015-5837

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.12.x through 1.13.1 Description The issue allows remote attackers to bypass an intended preauthentication requirement. This can be achieved by providing either zero bytes of data or an arbitrary realm name. The proble...

openSUSE Compromise Protected Information

The krb5-plugin-preauth-pkinit package of the OpenSUSE operating system has multiple vulnerabilities that, if exploited, could lead to a breach of protected information. These vulnerabilities can be exploited remotely...

openSUSE Security Update : krb5 (openSUSE-SU-2010:0709-1)

remote authenticated clients could crash the kdc CVE-2010-1322. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-3259. The text description of this plugin is C SUSE LLC...