Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mit kerberos 5 1.3.1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2005-1174
MIT Kerberos 5 (krb5) 1.3 up to and including 1.4.1 Key Distribution Center (KDC) allows remote malicious users to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.
Mit Kerberos 5 1.3.4Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.4.1Mit Kerberos 5 1.3.2Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.6Mit Kerberos 5 1.4
7.5
CVSSv2
CVE-2005-1175
Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and previous versions allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.
Mit Kerberos 5 1.3.2Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.4Mit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3.6
10
CVSSv2
CVE-2009-4212
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 up to and including 1.6.3, and 1.7 prior to 1.7.1, allow remote malicious users to cause a denial of service (daemon crash) or possibly execute a...
Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.4Mit Kerberos 5 1.4.4Mit Kerberos 5 1.5Mit Kerberos 5 1.7Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3.6Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2Mit Kerberos 5 1.3.1Mit Kerberos 5 1.3.2Mit Kerberos 5 1.4.2Mit Kerberos 5 1.4.3Mit Kerberos 5 1.6.2Mit Kerberos 5-1.6.3Mit Kerberos 5 1.3Mit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.5.3Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1
2.6
CVSSv2
CVE-2010-1323
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x up to and including 1.8.3 does not properly determine the acceptability of checksums, which might allow remote malicious users to modify user-visible prompt text, modify a response to a Key Distribution Center...
Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3.6Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.7.1Mit Kerberos 5 1.8Mit Kerberos 5 1.3.1Mit Kerberos 5 1.3.2Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1Mit Kerberos 5 1.8.3Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.4Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.6.2Mit Kerberos 5 1.7Mit Kerberos 5 1.3Mit Kerberos 5 1.4Mit Kerberos 5 1.5.2
5
CVSSv2
CVE-2014-5355
MIT Kerberos 5 (aka krb5) up to and including 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote malicious users to (1) cause a denial of service (NULL pointer dereference) via a ze...
Mit Kerberos 5 1.2.2Mit Kerberos 5 1.2.3Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6.2Mit Kerberos 5 1.8.4Mit Kerberos 5 1.8.5Mit Kerberos 5 1.10Mit Kerberos 5 1.10.1Mit Kerberos 5 1.10.2Mit Kerberos 5 1.11.4Mit Kerberos 5 1.11.5Mit Kerberos 5 1.1Mit Kerberos 5 1.2.6Mit Kerberos 5 1.2.7Mit Kerberos 5 1.3.4Mit Kerberos 5 1.3.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2
5
CVSSv2
CVE-2004-0644
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 up to and including 1.3.4 allows remote malicious users to cause a denial of service (infinite loop) via a certain BER encoding.
Mit Kerberos 5 1.2.7Mit Kerberos 5 1.2.8Mit Kerberos 5 1.2.2Mit Kerberos 5 1.3Mit Kerberos 5 1.3.1Mit Kerberos 5 1.2.5Mit Kerberos 5 1.2.6Mit Kerberos 5 1.3.4Mit Kerberos 5 1.2.3Mit Kerberos 5 1.2.4Mit Kerberos 5 1.3.2Mit Kerberos 5 1.3.3
10
CVSSv2
CVE-2001-0247
Buffer overflows in BSD-based FTP servers allows remote malicious users to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Sgi Irix 6.5.3Sgi Irix 6.5.3fSgi Irix 6.5.1Sgi Irix 6.5.10Sgi Irix 6.5.5Sgi Irix 6.5.6Mit Kerberos 5 1.1.1Sgi Irix 6.1Sgi Irix 6.5.3mSgi Irix 6.5.4Mit Kerberos 5 1.2Sgi Irix 6.5.11Sgi Irix 6.5.2mSgi Irix 6.5.7Sgi Irix 6.5.8Freebsd Freebsd 2.2Freebsd Freebsd 3.1Freebsd Freebsd 2.2.5Freebsd Freebsd 2.2.6Freebsd Freebsd 3.5
4.6
CVSSv2
CVE-2004-0643
Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and previous versions may allow local users to execute arbitrary code.
Mit Kerberos 5Debian Debian Linux 3.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Server 3.0Redhat Enterprise Linux Workstation 3.0
7.5
CVSSv2
CVE-2003-0028
Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote malicious users to execute arbitrary code via certain integer values i...
Gnu Glibc 2.1.1Gnu Glibc 2.1.2Gnu Glibc 2.3Gnu Glibc 2.3.1Mit Kerberos 5 1.2.5Mit Kerberos 5 1.2.6Openafs Openafs 1.0.4aOpenafs Openafs 1.1Openafs Openafs 1.2.3Openafs Openafs 1.2.4Sgi Irix 6.5.1Sgi Irix 6.5.10Sgi Irix 6.5.12fSgi Irix 6.5.12mSgi Irix 6.5.13Sgi Irix 6.5.15fSgi Irix 6.5.15mSgi Irix 6.5.18Sgi Irix 6.5.18fGnu Glibc 2.1.3Gnu Glibc 2.2Gnu Glibc 2.2.1
10
CVSSv2
CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote malicious users to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
Netkit Linux Netkit 0.10Netkit Linux Netkit 0.11Mit Kerberos 1.0Netkit Linux Netkit 0.12Sgi Irix 6.5Mit Kerberos 5 1.2Mit Kerberos 5 1.2.1Mit Kerberos 5 1.2.2Mit Kerberos 5 1.1Mit Kerberos 5 1.1.1Freebsd Freebsd 2.0Freebsd Freebsd 2.0.1Freebsd Freebsd 2.0.5Freebsd Freebsd 2.1Freebsd Freebsd 2.1.0Freebsd Freebsd 2.1.5Freebsd Freebsd 2.1.6Freebsd Freebsd 2.1.6.1Freebsd Freebsd 2.1.7Freebsd Freebsd 2.1.7.1Freebsd Freebsd 2.2Freebsd Freebsd 2.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook