Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mit kerberos 5 1.2.2 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0523
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and previous versions allow remote malicious users to execute arbitrary code as root.
Mit Kerberos 5 1.2Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Mit Kerberos 5 1.3Mit Kerberos 5 1.0Sgi Propack 2.4Mit Kerberos 1.0Mit Kerberos 1.0.8Mit Kerberos 5 1.2.5Mit Kerberos 5 1.2.6Mit Kerberos 5 1.1.1Sun Seam 1.0.2Tinysofa Tinysofa Enterprise Server 1.0Mit Kerberos 1.2.2.beta1Mit Kerberos 5 1.1Mit Kerberos 5 1.2.7Mit Kerberos 5 1.3.3Tinysofa Tinysofa Enterprise Server 1.0 U1Sgi Propack 3.0Mit Kerberos 5 1.2.3Mit Kerberos 5 1.2.4Mit Kerberos 5 1.0.6
10
CVSSv2
CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote malicious users to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Netkit Linux Netkit 0.10Netkit Linux Netkit 0.11Mit Kerberos 1.0Netkit Linux Netkit 0.12Sgi Irix 6.5Mit Kerberos 5 1.2Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Mit Kerberos 5 1.1Mit Kerberos 5 1.1.1Freebsd Freebsd 2.0Freebsd Freebsd 2.0.1Freebsd Freebsd 2.0.5Freebsd Freebsd 2.1Freebsd Freebsd 2.1.0Freebsd Freebsd 2.1.5Freebsd Freebsd 2.1.6Freebsd Freebsd 2.1.6.1Freebsd Freebsd 2.1.7Freebsd Freebsd 2.1.7.1Freebsd Freebsd 2.2Freebsd Freebsd 2.2.1
10
CVSSv2
CVE-2001-0247
Buffer overflows in BSD-based FTP servers allows remote malicious users to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Sgi Irix 6.5.3Sgi Irix 6.5.3fSgi Irix 6.5.1Sgi Irix 6.5.10Sgi Irix 6.5.5Sgi Irix 6.5.6Mit Kerberos 5 1.1.1Sgi Irix 6.1Sgi Irix 6.5.3mSgi Irix 6.5.4Mit Kerberos 5 1.2Sgi Irix 6.5.11Sgi Irix 6.5.2mSgi Irix 6.5.7Sgi Irix 6.5.8Freebsd Freebsd 2.2Freebsd Freebsd 3.1Freebsd Freebsd 2.2.5Freebsd Freebsd 2.2.6Freebsd Freebsd 3.5
9.3
CVSSv2
CVE-2008-0948
Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions prior to 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote malicious users to caus...
Mit Kerberos 5 1.2.2
7.5
CVSSv2
CVE-2005-0469
Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote malicious users to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.
Ncsa Telnet
7.5
CVSSv2
CVE-2003-0028
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote malicious users to execute arbitrary code via certain integer values i...
Gnu Glibc 2.1.1Gnu Glibc 2.1.2Gnu Glibc 2.3Gnu Glibc 2.3.1Mit Kerberos 5 1.2.5Mit Kerberos 5 1.2.6Openafs Openafs 1.0.4aOpenafs Openafs 1.1Openafs Openafs 1.2.3Openafs Openafs 1.2.4Sgi Irix 6.5.1Sgi Irix 6.5.10Sgi Irix 6.5.12fSgi Irix 6.5.12mSgi Irix 6.5.13Sgi Irix 6.5.15fSgi Irix 6.5.15mSgi Irix 6.5.18Sgi Irix 6.5.18fGnu Glibc 2.1.3Gnu Glibc 2.2Gnu Glibc 2.2.1
7.5
CVSSv2
CVE-2003-0138
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an malicious user to impersonate any principal in a realm via a chosen-plaintext attack.
Mit Kerberos 4
7.5
CVSSv2
CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an malicious user to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ti...
Mit Kerberos 4
7.5
CVSSv2
CVE-2003-0059
Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 prior to 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.
Mit Kerberos 5 1.2.2Mit Kerberos 5 1.2.1
7.5
CVSSv2
CVE-2003-0060
Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) prior to 1.2.5 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.
Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Mit Kerberos 5 1.2.3Mit Kerberos 5 1.2.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook