4 matches found
CVE-2011-4862
A buffer overflow exists in libtelnet/encrypt.c within telnetd affecting FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, and GNU inetutils . This vulnerability allows remote attackers to execute arbitrary code by providing a l...
CVE-2019-25017
CVE-2019-25017 affects rcp in MIT krb5-appl up to 1.0.3. The server determines which files/directories are sent, while the rcp client performs only cursory validation of object names, allowing a malicious server (or MITM) to overwrite arbitrary files in the client’s target directory; with -r, sub...
CVE-2011-1526
The CVE-2011-1526 issue affects MIT Kerberos Version 5 Applications (krb5-appl) ftpd.c: it does not check the krb5_setegid return value, enabling remote authenticated users to bypass group restrictions and perform create/overwrite/delete/read of files via FTP. The vulnerability is reported in con...