VYPR
← Mit

Vendor CVEs

Mit

All CVEs

154 total · sorted by risk
  • CVE-2005-0488Jun 14, 2005
    Microsoft
    Telnet Client
    risk 0.01cvss —epss 0.17

    Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

  • CVE-2004-0642Sep 28, 2004
    Mit
    Kerberos 5
    risk 0.01cvss —epss 0.08

    Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.

  • CVE-2004-0523Aug 18, 2004
    Mit
    Kerberos
    risk 0.01cvss —epss 0.12

    Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

  • CVE-2003-0028Mar 25, 2003
    dietlibc
    dietlibc
    risk 0.01cvss —epss 0.15

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in…

  • CVE-2002-1235Nov 4, 2002
    Mit
    Kerberos 5
    risk 0.01cvss —epss 0.15

    The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with…

  • CVE-2024-2698Jun 12, 2024
    Mit
    Kerberos
    risk 0.00cvss —epss 0.01

    A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If…

  • CVE-2023-39975Aug 16, 2023
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.01

    kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.

  • CVE-2023-36054Aug 7, 2023
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.02

    lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between…

  • CVE-2022-39028Aug 30, 2022
    GNU
    Inetutils
    risk 0.00cvss —epss 0.02

    telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff 0xf8. In a typical installation, the telnetd application would crash but the telnet service would remain available through inetd. However,…

  • CVE-2021-37750Aug 23, 2021
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.02

    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

  • CVE-2019-25017Feb 2, 2021
    Mit
    Krb5 Appl
    risk 0.00cvss —epss 0.01

    An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned (only…

  • CVE-2019-25018Feb 2, 2021
    Mit
    Krb5 Appl
    risk 0.00cvss —epss 0.02

    In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on the client…

  • CVE-2020-28196Nov 6, 2020
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

  • CVE-2018-20217Dec 26, 2018
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.02

    A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.

  • CVE-2018-5730LowMar 6, 2018
    Mit
    krb5
    risk 0.00cvss 3.8epss 0.02

    MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a…

  • CVE-2018-5729MedMar 6, 2018
    Mit
    krb5
    risk 0.00cvss 4.7epss 0.03

    MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.

  • CVE-2015-2698Nov 13, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The iakerb_gss_export_sec_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly accesses a certain pointer, which allows remote authenticated users to cause a denial of service (memory corruption) or possibly have…

  • CVE-2015-2697Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\0' character in a long realm field within a TGS request.

  • CVE-2015-2696Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.05

    lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a…

  • CVE-2015-2695Nov 9, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a…

  • CVE-2015-2694May 25, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2)…

  • CVE-2014-5355Feb 20, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.05

    MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or…

  • CVE-2014-9423Feb 19, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The svcauth_gss_accept_sec_context function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (aka krb5) 1.11.x through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 transmits uninitialized interposer data to clients, which allows remote attackers to obtain sensitive…

  • CVE-2014-9422Feb 19, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by…

  • CVE-2014-9421Feb 19, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of…

  • CVE-2014-5352Feb 19, 2015
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows…

  • CVE-2014-5354Dec 16, 2014
    Mit
    Kerberos
    risk 0.00cvss —epss 0.02

    plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by creating a database entry for a…

  • CVE-2014-5353Dec 16, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.05

    The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with…

  • CVE-2014-5351Oct 10, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.

  • CVE-2014-4345Aug 14, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.08

    Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) 1.6.x through 1.11.x before 1.11.6 and 1.12.x before 1.12.2 allows remote authenticated users to cause a…

  • CVE-2014-4344Aug 14, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.07

    The acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty continuation…

  • CVE-2014-4343Aug 14, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    Double free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.10.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (memory corruption) or possibly execute…

  • CVE-2014-4342Jul 20, 2014
    Mit
    Kerberos
    risk 0.00cvss —epss 0.07

    MIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read or NULL pointer dereference, and application crash) by injecting invalid tokens into a GSSAPI application session.

  • CVE-2014-4341Jul 20, 2014
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.07

    MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.

  • CVE-2013-1417Nov 20, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.02

    do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted…

  • CVE-2013-1418Nov 18, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    The setup_server_realm function in main.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.7, when multiple realms are configured, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

  • CVE-2013-6800Nov 18, 2013
    Mit
    Kerberos
    risk 0.00cvss —epss 0.03

    An unspecified third-party database module for the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request, a different vulnerability than…

  • CVE-2002-2443May 29, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.06

    schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a…

  • CVE-2013-1416Apr 19, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allows remote authenticated users to cause a denial of service (NULL pointer…

  • CVE-2013-1415Mar 5, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields…

  • CVE-2012-1016Mar 5, 2013
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The pkinit_server_return_padata function in plugins/preauth/pkinit/pkinit_srv.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows…

  • CVE-2012-1015Aug 6, 2012
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.05

    The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows…

  • CVE-2012-1014Aug 6, 2012
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or…

  • CVE-2012-1013Jun 7, 2012
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.03

    The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon crash) via a…

  • CVE-2012-1012Jun 7, 2012
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.01

    server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string…

  • CVE-2011-1530Dec 8, 2011
    Mit
    Kerberos
    risk 0.00cvss —epss 0.02

    The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an…

  • CVE-2011-4151Oct 20, 2011
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified…

  • CVE-2011-1529Oct 20, 2011
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference…

  • CVE-2011-1528Oct 20, 2011
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via…

  • CVE-2011-1527Oct 20, 2011
    Mit
    Kerberos 5
    risk 0.00cvss —epss 0.04

    The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string…

Page 2 of 4