4898 matches found
NTLM Relay to Self (HTTP to LDAP) - Post Exploitation
This module performs an NTLM relay-to-self privilege escalation attack. It starts an HTTP-to-LDAP relay server on the compromised host, then triggers the WebClient service via an ETW event allowing a low-privilege user to start it, and coerces the local machine account to authenticate via...
KTH Kerberos filesystem race condition on tickets stored in /tmp
Overview There may be a race condition during the creation of Kerberos ticket files in the /tmp directory. This race condition may allow intruders with local access to the system to gain root privileges. Description During the creation of ticket files in the /tmp directory, a sequence of calls...
Kerberos 4 4.05 5.0 - KDC Spoofing
Kerberos 4 4.05 5.0 - KDC Spoofing source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...
Kerberos 4 4.0/5 5.0 - KDC Spoofing
source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service which is vulnerable to an attack whi...
SSH with Kerberos NFS Share Ticket Disclosure
The remote host is running a version of SSH which is older than or as old as version 1.2.27. There is a flaw in the remote version of this software which allows an attacker to eavesdrop the kerberos tickets of legitimate users of this service, as sshd will set their environment variable KRB5CCNAM...
CVE-2000-0575
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS...
Проблема в SSH с Kerberos
При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...
Kerberos security vulnerability in SSH-1.2.27
I am writing to report a security bug in SSH 1.2.27. SOFTWARE AFFECTED: SSH 1.2.27 with Kerberos authentication support compiled in i.e. "configure --with-kerberos5". I have contacted SSH Communicators Security http://www.ssh.com about this, and they have just released ssh-1.2.28, which fixes thi...
MS:01F4B768-6EEC-41F5-A57B-CD719C8BCC2A
...
MS:2738A964-23F0-472A-8E78-C24967E0FE92
...
MS:96796677-A04B-4947-B962-EC5E48F4591B
...
MS:2111883D-EE94-4AA3-95C1-246307F5650C
...
MS:039A11E4-5B71-45A6-B900-586C4437E265
...
MS:EB217382-5E8C-4B2F-B699-0150CDD35190
...
MS:4797375A-63F7-4D20-92DA-43E8030426B9
...
MS:62721892-B62B-4273-949A-91C63F11A6C3
...
