Mit

Kerberos 5

137 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2012-1015

  • EPSS 3.1%
  • Published 06.08.2012 16:55:01
  • Last modified 11.04.2025 00:51:21

The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for...

5.5

CVE-2012-1012

  • EPSS 0.19%
  • Published 07.06.2012 19:55:07
  • Last modified 11.04.2025 00:51:21

server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to m...

4

CVE-2012-1013

Exploit
  • EPSS 1.11%
  • Published 07.06.2012 19:55:07
  • Last modified 11.04.2025 00:51:21

The check_1_6_dummy function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x, and 1.10.x before 1.10.2 allows remote authenticated administrators to cause a denial of service (NULL pointer dereference and daemon ...

7.8

CVE-2011-4151

  • EPSS 5.38%
  • Published 20.10.2011 21:55:01
  • Last modified 11.04.2025 00:51:21

The krb5_db2_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4, when the db2 (aka Berkeley DB) back end is used, allows remote attackers to cause a denial of service (assertion failure and daem...

7.8

CVE-2011-1527

  • EPSS 3.84%
  • Published 20.10.2011 21:55:00
  • Last modified 11.04.2025 00:51:21

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit oper...

7.8

CVE-2011-1528

  • EPSS 2.96%
  • Published 20.10.2011 21:55:00
  • Last modified 11.04.2025 00:51:21

The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure an...

7.8

CVE-2011-1529

  • EPSS 1.95%
  • Published 20.10.2011 21:55:00
  • Last modified 11.04.2025 00:51:21

The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of servic...

10

CVE-2011-0285

  • EPSS 51.67%
  • Published 15.04.2011 00:55:00
  • Last modified 11.04.2025 00:51:21

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service...

7.6

CVE-2011-0284

  • EPSS 27.66%
  • Published 20.03.2011 02:00:03
  • Last modified 11.04.2025 00:51:21

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (dae...

5

CVE-2011-0281

  • EPSS 11.25%
  • Published 10.02.2011 18:00:55
  • Last modified 11.04.2025 00:51:21

The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a prin...