krb5-server vulnerabilities (Red Hat)
117 vulnerabilities.
krb5-serverRed HatBuffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos...10.0 Highkrb5-serverRed HatThe process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos...6.8 Mediumkrb5-serverRed HatThe lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5-serverRed HatThe krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.8 Highkrb5-serverRed HatThe kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through...7.8 Highkrb5-serverRed Hatftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and...6.5 Mediumkrb5-serverRed HatThe process_chpw_request function in schpw.c in the password-changing functionality in kadmind in...10.0 Highkrb5-serverRed HatDouble free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution...7.6 Highkrb5-serverRed HatThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP...5.0 Mediumkrb5-serverRed HatThe unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6...5.0 Mediumkrb5-serverRed HatThe do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1...5.0 Mediumkrb5-serverRed HatMIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which...6.3 Mediumkrb5-serverRed HatMIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the...3.7 Lowkrb5-serverRed HatMIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not...3.7 Lowkrb5-serverRed HatThe merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT...6.5 Mediumkrb5-serverRed HatThe kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5...6.8 Mediumkrb5-serverRed HatUse-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka...6.5 Mediumkrb5-serverRed HatMultiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto...10.0 Highkrb5-serverRed HatThe asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime...10.0 Highkrb5-serverRed HatThe get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5...5.8 Mediumkrb5-serverRed HatThe spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 ...5.0 Mediumkrb5-serverRed HatBuffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...9.3 Highkrb5-serverRed HatBuffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...10.0 Highkrb5-serverRed HatThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...7.5 Highkrb5-serverRed HatKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Criticalkrb5-serverRed HatDouble free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5...6.9 Mediumkrb5-serverRed HatUse-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue...6.9 Mediumkrb5-serverRed HatThe original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT...10.0 Highkrb5-serverRed HatThe kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos...8.5 Highkrb5-serverRed HatStack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the...10.0 Highkrb5-serverRed HatStack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...9.0 Highkrb5-serverRed HatInteger signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC...8.3 Highkrb5-serverRed HatThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...10.0 Highkrb5-serverRed HatDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 Highkrb5-serverRed HatStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...9.0 Highkrb5-serverRed HatThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...10.0 Highkrb5-serverRed HatThe (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before...7.2 Highkrb5-serverRed HatDouble free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...9.8 Criticalkrb5-serverRed HatHeap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1...7.5 Highkrb5-serverRed HatMIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to...5.0 Mediumkrb5-serverRed HatCertain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote...5.0 Mediumkrb5-serverRed HatBuffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling...7.5 Highkrb5-serverRed HatHeap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet...7.5 Highkrb5-serverRed HatThe add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3...7.2 Highkrb5-serverRed HatThe krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1,...2.1 Lowkrb5-serverRed HatThe asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...5.0 Mediumkrb5-serverRed HatDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...4.6 Mediumkrb5-serverRed HatDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...7.5 Highkrb5-serverRed HatMultiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier...10.0 Highkrb5-serverRed HatDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...4.3 Medium