K5
Product
Kerberos 5
140
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 13Medium 13Low 3
Watch
Add Kerberos 5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0957 | – | Apr 6 | Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in… Affected: before 1.6.1 |
| CVE-2007-0956 | – | Apr 6 | The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a… Affected: before 1.6.1 |
| CVE-2006-6143 | – | Dec 31 | The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.5; +1 more |
| CVE-2006-6144 | – | Dec 31 | The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this… Affected: 1.5 through 1.5.1 |
| CVE-2006-3084 | – | Aug 9 | The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls,… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.5 |
| CVE-2006-3083 | – | Aug 9 | The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not… Affected: 1.4; 1.4.1; 1.4.2; 1.4.3; 1.5 |
| CVE-2005-1174 | – | Jul 18 | MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +3 more |
| CVE-2005-1175 | – | Jul 18 | Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash)… Affected: 1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +3 more |
| CVE-2005-0488 | – | Jun 14 | Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON… Affected: 1.3.4 |
| CVE-2004-0971 | – | Feb 9 | The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a… Affected: 1.3.4 |
| CVE-2004-1189 | – | Dec 31 | The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password… Affected: through 1.3.5 |
| CVE-2004-0642 | – | Sep 28 | Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4… Affected: through 1.3.4 |
| CVE-2004-0644 | – | Sep 28 | The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a… Affected: 1.2.2; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; +7 more |
| CVE-2004-0643 | – | Sep 28 | Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code Affected: through 1.3.3 |
| CVE-2004-0523 | – | Aug 18 | Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root Affected: 1.0; 1.0.6; 1.1; 1.1.1; 1.2; 1.2; +11 more |
| CVE-2003-0072 | – | Apr 2 | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm… Affected: 1.0.6; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2; +6 more |
| CVE-2003-0082 | – | Apr 2 | The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm… Affected: 1.0.6; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2; +6 more |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 1.2; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +2 more |
| CVE-2003-0058 | – | Feb 19 | MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain… Affected: 1.2.1; 1.2.2; 1.2.3; 1.2.4 |
| CVE-2003-0060 | – | Feb 19 | Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash)… Affected: 1.2.1; 1.2.2; 1.2.3; 1.2.4 |
| CVE-2003-0059 | – | Feb 19 | Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the… Affected: 1.2.1; 1.2.2 |
| CVE-2002-0036 | – | Feb 19 | Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is… Affected: 1.2.1; 1.2.2; 1.2.3; 1.2.4 |
| CVE-2002-1235 | – | Nov 4 | The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4… Affected: 1.0 through 1.2.6 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2 |
| CVE-2001-0417 | – | Jun 27 | Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files Affected: 1.5.2 |
| CVE-2001-0247 | – | Jun 18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2)… Affected: 1.1.1; 1.2; 1.2.1; 1.2.2 |
| CVE-2001-1323 | – | May 16 | Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which… Affected: before 1.2.2 |
| CVE-2000-0514 | – | Jun 14 | GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain… Affected: 1.1; 1.1.1 |
| CVE-2000-0547 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function Affected: 1.0 through 1.0.7; 1.1; 1.1.1 |
| CVE-2000-0550 | – | Jun 9 | Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service Affected: 1.0; 1.1; 1.1.1 |
| CVE-2000-0549 | – | Jun 9 | Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed… Affected: 1.0; 1.1; 1.1.1 |
| CVE-2000-0548 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function Affected: 1.0 through 1.0.7; 1.1; 1.1.1 |
| CVE-2000-0546 | – | Jun 9 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function Affected: 1.0 through 1.0.7; 1.1; 1.1.1 |
| CVE-2000-0390 | – | May 16 | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges Affected: 1.0; 1.1.1 |
| CVE-2000-0392 | – | May 16 | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges Affected: 1.0; 1.1.1 |
| CVE-2000-0391 | – | May 16 | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges Affected: 1.0; 1.1.1 |
| CVE-2000-0389 | – | May 16 | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges Affected: 1.0; 1.1.1 |
| CVE-1999-0713 | – | Jun 11 | The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges Affected: All versions, or not specified |
| CVE-1999-1296 | – | Apr 29 | Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can… Affected: 1.5.2 |
| CVE-1999-0143 | – | Feb 21 | Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys Affected: All versions, or not specified |