CVE-2005-1689

Ga�l Delalleau discovered a buffer overflow in the env_opt_add() function of the Kerberos 4 and 5 telnet clients By sending specially crafted replies, a malicious telnet server could exploit this to execute arbitrary code with the privileges of the user running the telnet client (CVE-2005-0468) ...

Synopsis krb5 security update Type/Severity Security Advisory: Important Topic Updated krb5 packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedHat Security Response Team Description ...

Synopsis krb5 security update Type/Severity Security Advisory: Critical Topic Updated krb5 packages which fix multiple security issues are now availablefor Red Hat Enterprise Linux 21 and 3This update has been rated as having critical security impact by the RedHat Security Response Team[Updated 26 Sep 20 ...

Daniel Wachdorf reported two problems in the MIT krb5 distribution used for network authentication First, the KDC program from the krb5-kdc package can corrupt the heap by trying to free memory which has already been freed on receipt of a certain TCP connection This vulnerability can cause the KDC to crash, leading to a denial of service [CAN-20 ...