Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mit kerberos 5 1.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-0844
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 up to and including 1.6.3 allows remote malicious users to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buff...
Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6.2Mit Kerberos 5 -Mit Kerberos 5 1.5Mit Kerberos 5-1.6.3Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2Mit Kerberos 5 1.5.3Mit Kerberos 5 1.6
NA
CVE-2009-0845
The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 up to and including 1.6.3, when SPNEGO is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via invalid Contex...
Mit Kerberos 5 1.5.2Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5Mit Kerberos 5 1.6.2Mit Kerberos 5 1.6.1Mit Kerberos 5 1.6Mit Kerberos 5 1.5.3Mit Kerberos 5-1.6.3
NA
CVE-2006-3084
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x prior to 1.4.4, and (b) Heimdal 0.7.2 and previous versions, do not check return codes for setuid calls, which might allow local users to gain privileges by causing setuid to fail to drop privileg...
Mit Kerberos 5 1.5Heimdal HeimdalMit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.4.3
NA
CVE-2007-3999
Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 up to and including 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party application...
Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.6.2Mit Kerberos 5 1.4Mit Kerberos 5 1.5.2Mit Kerberos 5 1.5.3Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1
NA
CVE-2007-4743
The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 up to and including 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in...
Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1Mit Kerberos 5 1.4Mit Kerberos 5 1.5.2Mit Kerberos 5 1.5.3Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.6.2Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1
NA
CVE-2008-0947
Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 up to and including 1.6.3 allows remote malicious users to execute arbitrary code by triggering a large number of open file descriptors.
Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.4Mit Kerberos 5 1.5.2Mit Kerberos 5 1.5.3Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.6.2Mit Kerberos 5 1.6.3Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1
NA
CVE-2006-3083
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x prior to 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and previous versions, do not check return codes for setuid calls, which allows local users to gain privileges by causin...
Heimdal Heimdal 0.7.2Mit Kerberos 5 1.4.2Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.5
NA
CVE-2009-4212
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 up to and including 1.6.3, and 1.7 prior to 1.7.1, allow remote malicious users to cause a denial of service (daemon crash) or possibly execute a...
Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.4Mit Kerberos 5 1.4.4Mit Kerberos 5 1.5Mit Kerberos 5 1.7Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3.6Mit Kerberos 5 1.5.1Mit Kerberos 5 1.5.2Mit Kerberos 5 1.3.1Mit Kerberos 5 1.3.2Mit Kerberos 5 1.4.2Mit Kerberos 5 1.4.3Mit Kerberos 5 1.6.2Mit Kerberos 5-1.6.3Mit Kerberos 5 1.3Mit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.5.3Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1
3.7
CVSSv3
CVE-2010-1323
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x up to and including 1.8.3 does not properly determine the acceptability of checksums, which might allow remote malicious users to modify user-visible prompt text, modify a response to a Key Distribution Center...
Mit Kerberos 5 1.3.5Mit Kerberos 5 1.3.6Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1Mit Kerberos 5 1.7.1Mit Kerberos 5 1.8Mit Kerberos 5 1.3.1Mit Kerberos 5 1.3.2Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.6Mit Kerberos 5 1.6.1Mit Kerberos 5 1.8.3Mit Kerberos 5 1.3.3Mit Kerberos 5 1.3.4Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.6.2Mit Kerberos 5 1.7Mit Kerberos 5 1.3Mit Kerberos 5 1.4Mit Kerberos 5 1.5.2
NA
CVE-2006-6143
The RPC library in Kerberos 5 1.4 up to and including 1.4.4, and 1.5 up to and including 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote malicious use...
Mit Kerberos 5 1.4Mit Kerberos 5 1.4.1Mit Kerberos 5 1.4.2Mit Kerberos 5 1.4.3Mit Kerberos 5 1.4.4Mit Kerberos 5 1.5Mit Kerberos 5 1.5.1Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 6.06
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook