Skip to content

Mit Kerberos vulnerabilities

mit kerberos 5, canonical ubuntu linux, debian linux +2 moreThe gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier...CVE-2007-2442Fix availableEPSS 11.4%10.0 HighJune 26, 2007
mit kerberos 5, todd miller sudo +1 moresudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can...CVE-2007-31497.2 HighJune 11, 2007
canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...CVE-2007-1216Fix available9.0 HighApril 3, 2007
canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...CVE-2007-0957Fix availableEPSS 10.4%9.0 HighApril 3, 2007
canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...CVE-2007-0956Fix availableEPSS 30.2%10.0 HighApril 3, 2007
mit kerberos 5The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as...CVE-2006-61445.0 MediumDecember 31, 2006
mit kerberos 5, canonical ubuntu linux +1 moreThe RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...CVE-2006-6143Fix available9.3 HighDecember 31, 2006
heimdal, mit kerberos 5 +1 moreThe (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4,...CVE-2006-3084Fix available7.2 HighAugust 9, 2006
heimdal, mit kerberos 5 +1 moreThe (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before...CVE-2006-3083Fix available7.2 HighAugust 9, 2006
mit kerberos 5, apple mac os x, mac os x server +1 more +3 moreDouble free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and...CVE-2005-1689Fix availableEPSS 11.0%9.8 CriticalJuly 17, 2005
mit kerberos 5Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1...CVE-2005-1175Fix available7.5 HighJuly 17, 2005
mit kerberos 5MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to...CVE-2005-1174Fix available5.0 MediumJuly 16, 2005
microsoft telnet client, mit kerberos 5, sun sunos +2 moreCertain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote...CVE-2005-0488Fix availableEPSS 17.1%5.0 MediumJune 14, 2005
mit kerberos 5The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3...CVE-2004-1189Fix available7.2 HighDecember 31, 2004
mit kerberos 5The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1,...CVE-2004-0971Fix available2.1 LowOctober 20, 2004
mit kerberos 5, debian linux, openpkg +2 moreDouble free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and...CVE-2004-0772Fix available9.8 CriticalAugust 31, 2004
mit kerberos 5The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2...CVE-2004-0644Fix available5.0 MediumAugust 31, 2004
mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...CVE-2004-0643Fix available4.6 MediumAugust 31, 2004
mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...CVE-2004-0642Fix available7.5 HighAugust 31, 2004
mit kerberos, kerberos 5, sgi propack +4 more +6 moreMultiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier...CVE-2004-0523Fix availableEPSS 11.7%10.0 HighJune 3, 2004
mit kerberos, kerberos 5 +1 moreThe Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote,...CVE-2003-0082Fix available5.0 MediumMarch 24, 2003
mit kerberos, kerberos 5 +1 moreThe Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote,...CVE-2003-0072Fix available5.0 MediumMarch 24, 2003
mit kerberosCertain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5...CVE-2003-0139Fix available7.5 HighMarch 21, 2003
mit kerberosVersion 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an...CVE-2003-0138Fix available7.5 HighMarch 21, 2003
gnu glibc, cray unicos, freebsd +10 more +12 moreInteger overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ...CVE-2003-0028Fix availableEPSS 15.0%7.5 HighMarch 21, 2003
mit kerberos 5Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5...CVE-2003-0059Fix available7.5 HighFebruary 19, 2003
mit kerberos 5, sun enterprise authentication mechanism, solaris +1 more +3 moreMIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers...CVE-2003-0058Fix available5.0 MediumFebruary 19, 2003
mit kerberos 5Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote...CVE-2002-00365.0 MediumFebruary 19, 2003
mit kerberos 5Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center...CVE-2003-0060Fix available7.5 HighFebruary 1, 2003
mit kerberos ftp client, mandrakesoft mandrake linux, mandrake multi network firewall +1 more +3 moreKerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in...CVE-2003-004110.0 HighFebruary 1, 2003
kth kerberos 4, kerberos 5, debian linux +2 moreThe kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in...CVE-2002-1235Fix availableEPSS 15.1%10.0 HighOctober 25, 2002
debian linux, freebsd, ibm aix +8 more +10 moreBuffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote...CVE-2001-0554Public exploitEPSS 38.7%10.0 HighAugust 14, 2001
mit kerberos, kerberos 5 +1 moreKerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new...CVE-2001-04172.1 LowMay 24, 2001
freebsd, mit kerberos 5, netbsd +2 more +4 moreBuffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands...CVE-2001-0247Public exploitEPSS 19.3%10.0 HighMay 24, 2001
mit kerberos 5Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a...CVE-2001-13237.5 HighMay 16, 2001
mit kerberos 5GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands,...CVE-2000-051410.0 HighJune 14, 2000
mit kerberos, cygnus network security, kerbnet +1 more +3 moreKerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote...CVE-2000-05505.0 MediumJune 9, 2000
mit kerberos, cygnus network security, kerbnet +1 more +3 moreKerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST...CVE-2000-05495.0 MediumJune 9, 2000
mit kerberos, cygnus network security project network security, kerbnet project kerbnet +1 more +3 moreBuffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service...CVE-2000-0548Fix available5.0 MediumJune 9, 2000
mit kerberos, cygnus network security project network security, kerbnet project kerbnet +1 more +3 moreBuffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service...CVE-2000-0547Fix available5.0 MediumJune 9, 2000
mit kerberos, cygnus network security project network security, kerbnet project kerbnet +1 more +3 moreBuffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service...CVE-2000-0546Fix available5.0 MediumJune 9, 2000
mit kerberos, kerberos 5, cygnus network security +2 more +4 moreBuffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.CVE-2000-03927.2 HighMay 16, 2000
mit kerberos, kerberos 5, cygnus network security +2 more +4 moreBuffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-039110.0 HighMay 16, 2000
mit kerberos, kerberos 5, cygnus network security +2 more +4 moreBuffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain...CVE-2000-039010.0 HighMay 16, 2000
mit kerberos, cygnus network security, kerbnet +2 more +4 moreBuffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root...CVE-2000-0389Public exploitEPSS 16.5%10.0 HighMay 16, 2000
digital unix, cde, mit kerberos 5 +1 more +3 moreThe dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.CVE-1999-07137.2 HighJune 11, 1999
mit kerberosBuffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to...CVE-1999-13217.5 HighNovember 5, 1998
mit kerberos 5Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users...CVE-1999-12967.2 HighApril 29, 1997
mit kerberos, kerberos 5, process software multinet +1 more +3 moreKerberos 4 key servers allow a user to masquerade as another by breaking and generating session...CVE-1999-01434.6 MediumFebruary 21, 1996