Mit vulnerabilities, page 5
175 vulnerabilities
Known vulnerabilities in Mit products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.
CVE-2012-1014debiankrb5+1
EPSS score4.34%
The process_as_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a certain structure member, which allows remote attackers to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a malformed AS-REQ request.CVE-2012-1015debiankrb5+1EPSS score4.81%
The kdc_handle_protected_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free, heap memory corruption, and daemon crash) via a crafted AS-REQ request.CVE-2012-1012debiankrb5+1EPSS score1.21%
server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which might allow remote authenticated administrators to modify or read string attributes by leveraging the global list privilege.CVE-2000-0546cygnus_network_security_projectcygnus_network_security+3EPSS score2.89%
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.CVE-2000-0514mitkerberos_5EPSS score2.52%
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.CVE-2000-0390cygnuscygnus_network_security+4EPSS score4.03%
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-0547cygnus_network_security_projectcygnus_network_security+3EPSS score2.89%
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.CVE-2000-0391cygnuscygnus_network_security+4EPSS score4.03%
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-0548cygnus_network_security_projectcygnus_network_security+3EPSS score2.89%
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function.CVE-2000-0550cygnuscygnus_network_security+3EPSS score2.40%
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.CVE-2000-0389cygnuscygnus_network_security+4EPSS score16.50%
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.CVE-2000-0549cygnuscygnus_network_security+3EPSS score2.28%
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.CVE-2000-0392cygnuscygnus_network_security+4EPSS score0.44%
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.CVE-2011-1528debiankrb5+1EPSS score4.18%
The krb5_ldap_lockout_audit function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors, related to the locked_check_p function. NOTE: the Berkeley DB vector is covered by CVE-2011-4151.CVE-2011-1529debiankrb5+1EPSS score4.05%
The lookup_lockout_policy function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8 through 1.8.4 and 1.9 through 1.9.1, when the db2 (aka Berkeley DB) or LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger certain process_as_req errors.CVE-2011-1530debiankrb5+9EPSS score2.38%
The process_tgs_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted TGS request that triggers an error other than the KRB5_KDB_NOENTRY error.CVE-2011-1527debiankrb5+1EPSS score3.65%
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.CVE-2011-1526debiankrb5-appl+18EPSS score3.94%
ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, overwrite, delete, or read files, via standard FTP commands, related to missing autoconf tests in a configure script.CVE-2011-0283mitkerberos_5EPSS score2.62%
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request packet that does not trigger a response packet.CVE-2011-0281debiankrb5+2EPSS score4.20%
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.