Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

krb5-appl vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2019-25018
In the rcp client in MIT krb5-appl up to and including 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on th...
Mit Krb5-appl
5.8
CVSSv2
CVE-2019-25017
An issue exists in rcp in MIT krb5-appl up to and including 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (o...
Mit Krb5-appl
6.5
CVSSv2
CVE-2011-1526
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and previous versions does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, o...
Mit Krb5-applDebian Debian Linux 5.0Debian Debian Linux 6.0Fedoraproject Fedora 14Fedoraproject Fedora 15Opensuse Opensuse 11.3Opensuse Opensuse 11.4Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11
10
CVSSv2
CVE-2011-4862
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 up to and including 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and previous versions, Heimdal 1.5.1 and previous versions, GNU inetutils, and possibly other products allows remote malicious users...
Gnu InetutilsHeimdal Project HeimdalMit Krb5-applFreebsd FreebsdFedoraproject Fedora 15Fedoraproject Fedora 16Debian Debian Linux 5.0Debian Debian Linux 6.0Debian Debian Linux 7.0Opensuse Opensuse 11.3Opensuse Opensuse 11.4Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11
10
CVSSv2
CVE-2020-10188
utility.c in telnetd in netkit telnet up to and including 0.17 allows remote malicious users to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.
Netkit Telnet Project Netkit TelnetFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 8.0Debian Debian Linux 9.0Arista EosArista Eos 4.24.0fOracle Communications Performance Intelligence Center 10.4.0.2Juniper Junos 15.1x49Juniper Junos 15.1Juniper Junos 16.1Juniper Junos 12.3Juniper Junos 15.1x49-d30Juniper Junos 12.3x48Juniper Junos 12.3x50Juniper Junos 17.2Juniper Junos 17.3Juniper Junos 17.4Juniper Junos 18.1Juniper Junos 18.2Juniper Junos 18.3
NA
CVE-2022-39028
telnetd in GNU Inetutils up to and including 2.3, MIT krb5-appl up to and including 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available ...
Gnu InetutilsMit Kerberos 5Debian Debian Linux 10.0Netkit-telnet Project Netkit-telnet
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook