Product:

Kerberos

(Mit)
Repositories https://github.com/krb5/krb5
#Vulnerabilities 33
Date Id Summary Products Score Patch Annotated
2003-04-02 CVE-2003-0082 The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun"). Kerberos, Kerberos_5 N/A
2003-04-02 CVE-2003-0072 The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun"). Kerberos, Kerberos_5 N/A
2001-06-27 CVE-2001-0417 Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files. Kerberos, Kerberos_5 N/A
2000-06-09 CVE-2000-0550 Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5 N/A
2000-06-09 CVE-2000-0549 Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5 N/A
2000-05-16 CVE-2000-0392 Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5, Linux N/A
2000-05-16 CVE-2000-0391 Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5, Linux N/A
2000-05-16 CVE-2000-0390 Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5, Linux N/A
2000-05-16 CVE-2000-0389 Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. Cygnus_network_security, Kerbnet, Kerberos, Kerberos_5, Linux N/A
2009-04-08 CVE-2009-0847 The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations with pointer arithmetic. Kerberos N/A