Page 4 of 50 results (0.004 seconds)

CVSS: 9.8EPSS: 11%CPEs: 6EXPL: 0

CVE-2007-1216 – krb5 double free flaw

https://notcve.org/view.php?id=CVE-2007-1216

05 Apr 2007 — Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding". Una vulnerabilidad de Doble Liberación en la biblioteca GSS-API (lib/gssapi/krb5/k5unseal.c), como la utiliza el demon... • ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc • CWE-415: Double Free •

CVSS: 10.0EPSS: 35%CPEs: 6EXPL: 0

CVE-2007-0956 – Unauthorized access via krb5-telnet daemon

https://notcve.org/view.php?id=CVE-2007-0956

05 Apr 2007 — The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a similar issue to CVE-2007-0882. El demonio telnet (telnetd) en MIT krb5 anterior a 1.6.1 permite a atacantes remotos evitar la validación y ganar accesos al sistema a través de un nombre de usuario comenzando con el carácter '-', un asunto similar a CVE-2007-0882. A vulnerability was found in the username handling of the MIT krb5 telnet... • ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc • CWE-306: Missing Authentication for Critical Function •

CVSS: 9.8EPSS: 13%CPEs: 6EXPL: 1

CVE-2007-0957 – krb5_klog_syslog() stack buffer overflow

https://notcve.org/view.php?id=CVE-2007-0957

05 Apr 2007 — Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers. Desbordamiento de búfer en la función krb5_klog_syslog en la biblioteca kadm5, tal y como se usa en el demonio de administración de Kerberos... • https://packetstorm.news/files/id/55828 • CWE-787: Out-of-bounds Write •

CVSS: 9.8EPSS: 55%CPEs: 5EXPL: 0

CVE-2005-1689 – MITKRB5-SA-2005-003.txt

https://notcve.org/view.php?id=CVE-2005-1689

13 Jul 2005 — Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. Vulnerabilidad de doble liberación de memoria en la función krb5_recvauth en MIT Kerberos 5 (krb5) 1.4.1 y anteriores permite que atacantes remotos ejecuten código arbitrario mediante ciertas condiciones de error. Daniel Wachdorf discovered that MIT Kerberos 5 could corrupt the heap by freeing unallocated memory when receiving a sp... • ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc • CWE-415: Double Free •

CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2004-1189 – libkadm5srv.txt

https://notcve.org/view.php?id=CVE-2004-1189

31 Dec 2004 — The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow. The MIT Kerberos 5 administration library (libkadm5srv) contains a heap buffer overflow in password history handling code which could be ex... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917 • CWE-787: Out-of-bounds Write •

CVSS: 7.5EPSS: 8%CPEs: 13EXPL: 0

CVE-2004-0644

https://notcve.org/view.php?id=CVE-2004-0644

10 Sep 2004 — The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding. La función asn1buf_skiptail de la librería de decodificación de ASN.1 de MIT Kerberos 5 (krb5) 1.2.2 a 1.3.4 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante cierta codificación BER. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 •

CVSS: 9.1EPSS: 0%CPEs: 5EXPL: 0

CVE-2004-0643 – mit-2004-002.txt

https://notcve.org/view.php?id=CVE-2004-0643

08 Sep 2004 — Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code. Vulnerabilidad de doble liberación de memoria en la función krb5_rd_cred de MIT Kerberos 5 (krb5) 1.3.1 y anteriores pueden permitir a usuarios locales ejecutar código de su elección. The MIT Kerberos 5 implementation's Key Distribution Center (KDC) program contains a double-free vulnerability that potentially allows a remote attacker to execute arbitrary code. ... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 • CWE-415: Double Free •

CVSS: 9.8EPSS: 21%CPEs: 4EXPL: 0

CVE-2004-0772 – mit-2004-002.txt

https://notcve.org/view.php?id=CVE-2004-0772

08 Sep 2004 — Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code. Vulnerabilidad de doble liberación en el código de manejo de errores en krb524d de MIT Kerberos (krb5) 1.2.8 y anteriores puede permitir a atacantes remotos ejecutar código de su elección. The MIT Kerberos 5 implementation's Key Distribution Center (KDC) program contains a double-free vulnerability that potentially allows a remote attacker to execute... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 • CWE-415: Double Free •

CVSS: 9.8EPSS: 25%CPEs: 5EXPL: 0

CVE-2004-0642 – mit-2004-002.txt

https://notcve.org/view.php?id=CVE-2004-0642

08 Sep 2004 — Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code. Vulnerabilidades de liberación doble en el código de manejo de errores de ASN.1 en (1) la librería del Centro de Distribución de Claves (KDC) y (2) librería de cliente de MIT Kerberos 5 (krb5) 1.3.4 y anteriores puede permitir a atacantes remotos ejecutar código arbit... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 • CWE-415: Double Free •

CVSS: 10.0EPSS: 13%CPEs: 31EXPL: 0

CVE-2004-0523

https://notcve.org/view.php?id=CVE-2004-0523

03 Jun 2004 — Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root. Múltiples desbordamientos de búfer en krb5_aname_to_localname en MIT Kerberos 5 (krb5) 1.3.3 y anteriores permite a atacantes remtos ejecutar código de su elección como root • ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc •