Search CVE reports

Toggle filters

61 – 70 of 130 results

CVE-2012-1012

Low priority
Fixed

server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-4862

Medium priority
Ignored

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows...

4 affected packages

heimdal, inetutils, krb5, krb5-appl

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
heimdal — — — —
inetutils — — — —
krb5 — — — —
krb5-appl — — — —
Show less packages

CVE-2011-1530

Medium priority
Fixed

The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-4151

Medium priority
Fixed

The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-1529

Medium priority
Fixed

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-1528

Medium priority
Fixed

The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-1527

Medium priority
Fixed

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-1526

Medium priority
Ignored

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access...

2 affected packages

krb5, krb5-appl

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
krb5-appl — — — —
Show less packages

CVE-2011-0285

Low priority
Fixed

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages

CVE-2011-0284

Medium priority
Fixed

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a...

1 affected package

krb5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
krb5 — — — —
Show less packages
  1. Previous page
  2. 5
  3. 6
  4. 7
  5. 8
  6. 9
  7. Next page
Export to JSON