10 - HPSBOV02682 SSRT100495

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	HP OpenVMS running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Modification

Informations
Name	HPSBOV02682 SSRT100495	First vendor Publication	2011-05-05
Vendor	HP	Last vendor Modification	2011-05-05
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Potential vulnerabilities have been identified with HP OpenVMS running Kerberos. The vulnerabilities could be remotely exploited to create a Denial of Service (DoS) or execution of arbitrary code, or by a remote unauthorized user to modify data, prompts, or responses.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02824440

CAPEC : Common Attack Pattern Enumeration & Classification

Id	Name
CAPEC-26	Leveraging Race Conditions
CAPEC-29	Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
CAPEC-172	Time and State Attacks

CWE : Common Weakness Enumeration

%	Id	Name
40 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
20 %	CWE-665	Improper Initialization
20 %	CWE-310	Cryptographic Issues
20 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10694

Oval ID:	oval:org.mitre.oval:def:10694
Title:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Description:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0846	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section krb5-workstation is earlier than 0:1.2.7-70 AND krb5 is earlier than 0:1.2.7-70 AND krb5-libs is earlier than 0:1.2.7-70 AND krb5-server is earlier than 0:1.2.7-70 AND krb5-devel is earlier than 0:1.2.7-70 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section krb5-workstation is earlier than 0:1.3.4-60.el4_7.2 AND krb5 is earlier than 0:1.3.4-60.el4_7.2 AND krb5-libs is earlier than 0:1.3.4-60.el4_7.2 AND krb5-server is earlier than 0:1.3.4-60.el4_7.2 AND krb5-devel is earlier than 0:1.3.4-60.el4_7.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section krb5-workstation is earlier than 0:1.6.1-31.el5_3.3 AND krb5 is earlier than 0:1.6.1-31.el5_3.3 AND krb5-libs is earlier than 0:1.6.1-31.el5_3.3 AND krb5-server is earlier than 0:1.6.1-31.el5_3.3 AND krb5-devel is earlier than 0:1.6.1-31.el5_3.3

Definition Id: oval:org.mitre.oval:def:10984

Oval ID:	oval:org.mitre.oval:def:10984
Title:	Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.
Description:	Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0947	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section krb5-workstation is earlier than 0:1.6.1-17.el5_1.1 AND krb5 is earlier than 0:1.6.1-17.el5_1.1 AND krb5-libs is earlier than 0:1.6.1-17.el5_1.1 AND krb5-server is earlier than 0:1.6.1-17.el5_1.1 AND krb5-devel is earlier than 0:1.6.1-17.el5_1.1

Definition Id: oval:org.mitre.oval:def:11272

Oval ID:	oval:org.mitre.oval:def:11272
Title:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Description:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4212	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section krb5-workstation is earlier than 0:1.2.7-71 AND krb5 is earlier than 0:1.2.7-71 AND krb5-libs is earlier than 0:1.2.7-71 AND krb5-server is earlier than 0:1.2.7-71 AND krb5-devel is earlier than 0:1.2.7-71 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section krb5-workstation is earlier than 0:1.3.4-62.el4_8.1 AND krb5 is earlier than 0:1.3.4-62.el4_8.1 AND krb5-libs is earlier than 0:1.3.4-62.el4_8.1 AND krb5-server is earlier than 0:1.3.4-62.el4_8.1 AND krb5-devel is earlier than 0:1.3.4-62.el4_8.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section krb5-workstation is earlier than 0:1.6.1-36.el5_4.1 AND krb5 is earlier than 0:1.6.1-36.el5_4.1 AND krb5-libs is earlier than 0:1.6.1-36.el5_4.1 AND krb5-server is earlier than 0:1.6.1-36.el5_4.1 AND krb5-devel is earlier than 0:1.6.1-36.el5_4.1

Definition Id: oval:org.mitre.oval:def:12121

Oval ID:	oval:org.mitre.oval:def:12121
Title:	HP-UX Running Kerberos, Remote Unauthorized Modification.
Description:	MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1323	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02623 HP-UX B.11.31 AND filesets tests KRB5-Client.KRB5-PRG is installed AND KRB5-Client.KRB5-64SLIB is installed AND KRB5-Client.KRB5-IA32SLIB is installed AND KRB5-Client.KRB5-IA64SLIB is installed AND KRB5-Client.KRB5-RUN is installed AND KRB5-Client.KRB5-SHLIB is installed AND NOT Patch PHSS_41775 is installed OR Criteria meets HP Security Bulletin HPSBUX02623 HP Release B.11.23 AND filesets tests krb5client.KRB5-64SLIB-A version is less than D.1.6.2.09 AND krb5client.KRB5-PRG-A version is less than D.1.6.2.09 AND krb5client.KRB5-RUN-A version is less than D.1.6.2.09 AND krb5client.KRB5-SHLIB-A version is less than D.1.6.2.09 AND krb5client.KRB5IA32SLIB-A version is less than D.1.6.2.09 AND krb5client.KRB5IA64SLIB-A version is less than D.1.6.2.09 OR Criteria meets HP Security Bulletin HPSBUX02623 HP Release B.11.11 AND filesets tests krb5client.KRB5-64SLIB-A version is less than C.1.3.5.11 AND krb5client.KRB5-PRG-A version is less than C.1.3.5.11 AND krb5client.KRB5-RUN-A version is less than C.1.3.5.11 AND krb5client.KRB5-SHLIB-A version is less than C.1.3.5.11 OR Criteria meets HP Security Bulletin HPSBUX02623 HP-UX B.11.31 AND filesets tests krb5client.KRB5-64SLIB-A version is less than E.1.6.2.09 AND krb5client.KRB5-PRG-A version is less than E.1.6.2.09 AND krb5client.KRB5-RUN-A version is less than E.1.6.2.09 AND krb5client.KRB5-SHLIB-A version is less than E.1.6.2.09 AND krb5client.KRB5IA32SLIB-A version is less than E.1.6.2.09 AND krb5client.KRB5IA64SLIB-A version is less than E.1.6.2.09

Definition Id: oval:org.mitre.oval:def:12131

Oval ID:	oval:org.mitre.oval:def:12131
Title:	DSA-2129-1 krb5 -- checksum verification weakness
Description:	A vulnerability has been found in krb5, the MIT implementation of Kerberos. MIT krb5 clients incorrectly accept an unkeyed checksums in the SAM-2 preauthentication challenge: An unauthenticated remote attacker could alter a SAM-2 challenge, affecting the prompt text seen by the user or the kind of response sent to the KDC. Under some circumstances, this can negate the incremental security benefit of using a single-use authentication mechanism token. MIT krb5 incorrectly accepts RFC 3961 key-derivation checksums using RC4 keys when verifying KRB-SAFE messages: An unauthenticated remote attacker has a 1/256 chance of forging KRB-SAFE messages in an application protocol if the targeted pre-existing session uses an RC4 session key. Few application protocols use KRB-SAFE messages. The Common Vulnerabilities and Exposures project has assigned CVE-2010-1323 to these issues. For the stable distribution, these problems have been fixed in version 1.6.dfsg.4~beta1-5lenny6. The builds for the mips architecture are not included in this advisory. They will be released as soon as they are available. For the testing distribution and the unstable distribution, these problem have been fixed in version 1.8.3+dfsg-3. We recommend that you upgrade your krb5 packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2129-1 CVE-2010-1323	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	krb5
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-rsh-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-kdc-ldap DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND libkrb53 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND libkadm55 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-user DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-clients DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6 AND krb5-kdc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny6

Definition Id: oval:org.mitre.oval:def:13174

Oval ID:	oval:org.mitre.oval:def:13174
Title:	USN-881-1 -- krb5 vulnerability
Description:	It was discovered that Kerberos did not correctly handle invalid AES blocks. An unauthenticated remote attacker could send specially crafted traffic that would crash the KDC service, leading to a denial of service, or possibly execute arbitrary code with root privileges.
Family:	unix	Class:	patch
Reference(s):	USN-881-1 CVE-2009-4212	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	krb5
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section krb5-rsh-server DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND libkrb53 DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND libkadm55 DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-user DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-clients DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 AND krb5-kdc DPKG is earlier than 1.6.dfsg.3~beta1-2ubuntu1.3 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section krb5-rsh-server DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-kdc-ldap DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND libkrb53 DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND libkadm55 DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-user DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-clients DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 AND krb5-kdc DPKG is earlier than 1.6.dfsg.4~beta1-3ubuntu0.3 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section krb5-rsh-server DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libk5crypto3 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-kdc-ldap DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-telnetd DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkrb5support0 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkdb5-4 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkrb5-dev DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-ftpd DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-pkinit DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkadm5srv6 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-clients DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkrb5-3 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkrb5-dbg DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-user DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-kdc DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libgssrpc4 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libkadm5clnt6 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND libgssapi-krb5-2 DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 AND krb5-admin-server DPKG is earlier than 1.7dfsg~beta3-1ubuntu0.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.4.3-5ubuntu0.10 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section krb5-rsh-server DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-telnetd DPKG is earlier than 1.4.3-5ubuntu0.10 AND libkrb53 DPKG is earlier than 1.4.3-5ubuntu0.10 AND libkrb5-dev DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-ftpd DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-admin-server DPKG is earlier than 1.4.3-5ubuntu0.10 AND libkadm55 DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-user DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-clients DPKG is earlier than 1.4.3-5ubuntu0.10 AND krb5-kdc DPKG is earlier than 1.4.3-5ubuntu0.10 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section krb5-rsh-server DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-kdc-ldap DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND libkrb53 DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND libkadm55 DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-user DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-clients DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2 AND krb5-kdc DPKG is earlier than 1.6.dfsg.4~beta1-5ubuntu2.2

Definition Id: oval:org.mitre.oval:def:13177

Oval ID:	oval:org.mitre.oval:def:13177
Title:	DSA-1766-1 krb5 -- several
Description:	Several vulnerabilities have been found in the MIT reference implementation of Kerberos V5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identified the following problems: The Apple Product Security team discovered that the SPNEGO GSS-API mechanism suffers of a missing bounds check when reading a network input buffer which results in an invalid read crashing the application or possibly leaking information. Under certain conditions the SPNEGO GSS-API mechanism references a null pointer which crashes the application using the library. An incorrect length check inside the ASN.1 decoder of the MIT krb5 implementation allows an unauthenticated remote attacker to crash of the kinit or KDC program. Under certain conditions the the ASN.1 decoder of the MIT krb5 implementation frees an uninitialised pointer which could lead to denial of service and possibly arbitrary code execution. For the oldstable distribution, this problem has been fixed in version 1.4.4-7etch7. For the stable distribution, this problem has been fixed in version 1.6.dfsg.4~beta1-5lenny1. For the testing distribution, this problem will be fixed soon. For the unstable distribution, this problem has been fixed in version 1.6.dfsg.4~beta1-13. We recommend that you upgrade your krb5 packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1766-1 CVE-2009-0844 CVE-2009-0845 CVE-2009-0847 CVE-2009-0846	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-rsh-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc-ldap DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb53 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkadm55 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-user DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-clients DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc DPKG is earlier than 1.4.4-7etch7 AND krb5-rsh-server DPKG is earlier than 1.4.4-7etch7 AND krb5-telnetd DPKG is earlier than 1.4.4-7etch7 AND libkrb53 DPKG is earlier than 1.4.4-7etch7 AND libkrb5-dev DPKG is earlier than 1.4.4-7etch7 AND krb5-ftpd DPKG is earlier than 1.4.4-7etch7 AND krb5-admin-server DPKG is earlier than 1.4.4-7etch7 AND libkadm55 DPKG is earlier than 1.4.4-7etch7 AND libkrb5-dbg DPKG is earlier than 1.4.4-7etch7 AND krb5-user DPKG is earlier than 1.4.4-7etch7 AND krb5-clients DPKG is earlier than 1.4.4-7etch7 AND krb5-kdc DPKG is earlier than 1.4.4-7etch7

Definition Id: oval:org.mitre.oval:def:13574

Oval ID:	oval:org.mitre.oval:def:13574
Title:	DSA-1969-1 krb5 -- integer underflow
Description:	It was discovered that krb5, a system for authenticating users and services on a network, is prone to integer underflow in the AES and RC4 decryption operations of the crypto library. A remote attacker can cause crashes, heap corruption, or, under extraordinarily unlikely conditions, arbitrary code execution. For the old stable distribution, this problem has been fixed in version 1.4.4-7etch8. For the stable distribution, this problem has been fixed in version 1.6.dfsg.4~beta1-5lenny2. For the testing distribution, this problem will be fixed soon. For the unstable distribution, this problem has been fixed in version 1.8+dfsg~alpha1-1. We recommend that you upgrade your krb5 package.
Family:	unix	Class:	patch
Reference(s):	DSA-1969-1 CVE-2009-4212	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-kdc-ldap DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-telnetd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb53 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb5-dev DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-ftpd DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-pkinit DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-admin-server DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkadm55 DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb5-dbg DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-user DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-clients DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-kdc DPKG is earlier than 1.6.dfsg.4~beta1-5lenny2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independet section Installed architecture is all AND krb5-doc DPKG is earlier than 1.4.4-7etch8 AND krb5-rsh-server DPKG is earlier than 1.4.4-7etch8 AND krb5-telnetd DPKG is earlier than 1.4.4-7etch8 AND libkrb5-dev DPKG is earlier than 1.4.4-7etch8 AND libkrb53 DPKG is earlier than 1.4.4-7etch8 AND krb5-ftpd DPKG is earlier than 1.4.4-7etch8 AND libkadm55 DPKG is earlier than 1.4.4-7etch8 AND libkrb5-dbg DPKG is earlier than 1.4.4-7etch8 AND krb5-user DPKG is earlier than 1.4.4-7etch8 AND krb5-kdc DPKG is earlier than 1.4.4-7etch8 AND krb5-clients DPKG is earlier than 1.4.4-7etch8 AND krb5-admin-server DPKG is earlier than 1.4.4-7etch8

Definition Id: oval:org.mitre.oval:def:17145

Oval ID:	oval:org.mitre.oval:def:17145
Title:	USN-587-1 -- krb5 vulnerabilities
Description:	It was discovered that krb5 did not correctly handle certain krb4 requests.
Family:	unix	Class:	patch
Reference(s):	USN-587-1 CVE-2008-0062 CVE-2008-0063 CVE-2008-0947	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	krb5
Definition Synopsis:
Release section Ubuntu 6.06 is installed Packages match section libkadm55 DPKG is earlier than 1.4.3-5ubuntu0.7 AND libkrb53 DPKG is earlier than 1.4.3-5ubuntu0.7 AND Release section Ubuntu 6.10 is installed Packages match section libkadm55 DPKG is earlier than 1.4.3-9ubuntu1.6 AND libkrb53 DPKG is earlier than 1.4.3-9ubuntu1.6 AND Release section Ubuntu 7.04 is installed Packages match section libkadm55 DPKG is earlier than 1.4.4-5ubuntu3.4 AND libkrb53 DPKG is earlier than 1.4.4-5ubuntu3.4 AND Release section Ubuntu 7.10 is installed Packages match section libkadm55 DPKG is earlier than 1.6.dfsg.1-7ubuntu0.1 AND libkrb53 DPKG is earlier than 1.6.dfsg.1-7ubuntu0.1

Definition Id: oval:org.mitre.oval:def:19888

Oval ID:	oval:org.mitre.oval:def:19888
Title:	VMware ESXi and ESX Denial of Service and third party updates for Likewise components and ESX Service Console
Description:	MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1323	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201104401-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201104401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20132

Oval ID:	oval:org.mitre.oval:def:20132
Title:	VMware ESX third party updates for Service Console packages glibc and dhcp
Description:	MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-1323	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201110201-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110201-SG is not installed OR Patch ESX400-201110403-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201110403-SG is not installed

Definition Id: oval:org.mitre.oval:def:20288

Oval ID:	oval:org.mitre.oval:def:20288
Title:	DSA-1524-1 krb5 - multiple vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the kdc component of the krb5, a system for authenticating users and services on a network.
Family:	unix	Class:	patch
Reference(s):	DSA-1524-1 CVE-2008-0062 CVE-2008-0063 CVE-2008-0947	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND krb5 DPKG is earlier than 0:1.4.4-7etch5

Definition Id: oval:org.mitre.oval:def:21755

Oval ID:	oval:org.mitre.oval:def:21755
Title:	RHSA-2010:0029: krb5 security update (Critical)
Description:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0029-02 CESA-2010:0029 CVE-2009-4212	Version:	4
Platform(s):	Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	krb5
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section krb5-libs is earlier than 0:1.6.1-36.el5_4.1 AND krb5-devel is earlier than 0:1.6.1-36.el5_4.1 AND krb5-server is earlier than 0:1.6.1-36.el5_4.1 AND krb5 is earlier than 0:1.6.1-36.el5_4.1 AND krb5-workstation is earlier than 0:1.6.1-36.el5_4.1

Definition Id: oval:org.mitre.oval:def:22250

Oval ID:	oval:org.mitre.oval:def:22250
Title:	RHSA-2010:0926: krb5 security update (Moderate)
Description:	MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0926-01 CESA-2010:0926 CVE-2010-1323	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	krb5
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section krb5-libs is earlier than 0:1.6.1-36.el5_5.6 AND krb5-devel is earlier than 0:1.6.1-36.el5_5.6 AND krb5-server is earlier than 0:1.6.1-36.el5_5.6 AND krb5 is earlier than 0:1.6.1-36.el5_5.6 AND krb5-workstation is earlier than 0:1.6.1-36.el5_5.6

Definition Id: oval:org.mitre.oval:def:22707

Oval ID:	oval:org.mitre.oval:def:22707
Title:	ELSA-2008:0164: krb5 security and bugfix update (Critical)
Description:	Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0164-01 CVE-2007-5901 CVE-2007-5971 CVE-2008-0062 CVE-2008-0063 CVE-2008-0947	Version:	25
Platform(s):	Oracle Linux 5	Product(s):	krb5
Definition Synopsis:
Oracle Linux 5.x rpm test krb5-libs is earlier than 0:1.6.1-17.el5_1.1 AND krb5-devel is earlier than 0:1.6.1-17.el5_1.1 AND krb5-server is earlier than 0:1.6.1-17.el5_1.1 AND krb5 is earlier than 0:1.6.1-17.el5_1.1 AND krb5-workstation is earlier than 0:1.6.1-17.el5_1.1

Definition Id: oval:org.mitre.oval:def:22765

Oval ID:	oval:org.mitre.oval:def:22765
Title:	ELSA-2009:0408: krb5 security update (Important)
Description:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0408-01 CVE-2009-0844 CVE-2009-0845 CVE-2009-0846	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	krb5
Definition Synopsis:
Oracle Linux 5.x rpm test krb5-libs is earlier than 0:1.6.1-31.el5_3.3 AND krb5-devel is earlier than 0:1.6.1-31.el5_3.3 AND krb5-server is earlier than 0:1.6.1-31.el5_3.3 AND krb5 is earlier than 0:1.6.1-31.el5_3.3 AND krb5-workstation is earlier than 0:1.6.1-31.el5_3.3

Definition Id: oval:org.mitre.oval:def:22784

Oval ID:	oval:org.mitre.oval:def:22784
Title:	ELSA-2010:0926: krb5 security update (Moderate)
Description:	MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0926-01 CVE-2010-1323	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	krb5
Definition Synopsis:
Oracle Linux 5.x rpm test krb5-libs is earlier than 0:1.6.1-36.el5_5.6 AND krb5-devel is earlier than 0:1.6.1-36.el5_5.6 AND krb5-server is earlier than 0:1.6.1-36.el5_5.6 AND krb5 is earlier than 0:1.6.1-36.el5_5.6 AND krb5-workstation is earlier than 0:1.6.1-36.el5_5.6

Definition Id: oval:org.mitre.oval:def:22869

Oval ID:	oval:org.mitre.oval:def:22869
Title:	ELSA-2010:0029: krb5 security update (Critical)
Description:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0029-02 CVE-2009-4212	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	krb5
Definition Synopsis:
Oracle Linux 5.x rpm test krb5-libs is earlier than 0:1.6.1-36.el5_4.1 AND krb5-devel is earlier than 0:1.6.1-36.el5_4.1 AND krb5-server is earlier than 0:1.6.1-36.el5_4.1 AND krb5 is earlier than 0:1.6.1-36.el5_4.1 AND krb5-workstation is earlier than 0:1.6.1-36.el5_4.1

Definition Id: oval:org.mitre.oval:def:28421

Oval ID:	oval:org.mitre.oval:def:28421
Title:	RHSA-2009:0408 -- krb5 security update (Important)
Description:	Updated krb5 packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC). The Generic Security Service Application Program Interface (GSS-API) definition provides security services to callers (protocols) in a generic fashion. The Simple and Protected GSS-API Negotiation (SPNEGO) mechanism is used by GSS-API peers to choose from a common set of security mechanisms. An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:0408 CESA-2009:0408-CentOS 5 CVE-2009-0844 CVE-2009-0845 CVE-2009-0846	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	krb5
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section krb5-devel is earlier than 0:1.6.1-31.el5_3.3 AND krb5-server is earlier than 0:1.6.1-31.el5_3.3 AND krb5-libs is earlier than 0:1.6.1-31.el5_3.3 AND krb5-workstation is earlier than 0:1.6.1-31.el5_3.3

Definition Id: oval:org.mitre.oval:def:5483

Oval ID:	oval:org.mitre.oval:def:5483
Title:	Kerberos ASN.1 GeneralizedTime Decoder Bug Lets Remote Users Execute Arbitrary Code
Description:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0846	Version:	5
Platform(s):	VMWare ESX Server 3 VMWare ESX Server 3.5 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
IF VMWare ESX Server 3.0.3 is installed AND Patch ESX303-200908403-SG is not installed OR VMware ESX Server 4.0 is installed AND Patch ESX400-200906405-SG is not installed OR VMware ESX Server 3.5.0 is installed AND Patch ESX350-200906407-SG is not installed OR VMWare ESX Server 3.0.2 is installed

Definition Id: oval:org.mitre.oval:def:6301

Oval ID:	oval:org.mitre.oval:def:6301
Title:	HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code
Description:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0846	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02421 HP Release B.11.23 AND filesets tests krb5client.KRB5-64SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5-64SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5-PRG-A version is less than D.1.6.2.01 AND krb5client.KRB5-RUN-A version is less than D.1.6.2.01 AND krb5client.KRB5-SHLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5IA32SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5IA64SLIB-A version is less than D.1.6.2.01 OR Criteria meets HP Security Bulletin HPSBUX02421 HP Release B.11.11 AND filesets tests krb5client.KRB5-64SLIB-A version is less than C.1.3.5.09 AND krb5client.KRB5-PRG-A version is less than C.1.3.5.09 AND krb5client.KRB5-RUN-A version is less than C.1.3.5.09 AND krb5client.KRB5-SHLIB-A version is less than C.1.3.5.09 OR Criteria meets HP Security Bulletin HPSBUX02421 HP-UX B.11.31 AND filesets tests krb5client.KRB5-64SLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5-PRG-A version is less than E.1.6.2.03 AND krb5client.KRB5-RUN-A version is less than E.1.6.2.03 AND krb5client.KRB5-SHLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5IA32SLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5IA64SLIB-A version is less than E.1.6.2.03

Definition Id: oval:org.mitre.oval:def:7357

Oval ID:	oval:org.mitre.oval:def:7357
Title:	MIT Kerberos AES and RC4 Decryption Integer Underflow Vulnerabilities
Description:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4212	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201005406-SG is not installed

Definition Id: oval:org.mitre.oval:def:7452

Oval ID:	oval:org.mitre.oval:def:7452
Title:	DSA-1969 krb5 -- integer underflow
Description:	It was discovered that krb5, a system for authenticating users and services on a network, is prone to integer underflow in the AES and RC4 decryption operations of the crypto library. A remote attacker can cause crashes, heap corruption, or, under extraordinarily unlikely conditions, arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-1969 CVE-2009-4212	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.6.dfsg.4~beta1-5lenny2 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-kdc-ldap is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-telnetd is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb53 is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb5-dev is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-ftpd is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-pkinit is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-admin-server is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkadm55 is earlier than 1.6.dfsg.4~beta1-5lenny2 AND libkrb5-dbg is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-user is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-clients is earlier than 1.6.dfsg.4~beta1-5lenny2 AND krb5-kdc is earlier than 1.6.dfsg.4~beta1-5lenny2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.4.4-7etch8 AND krb5-rsh-server is earlier than 1.4.4-7etch8 AND krb5-telnetd is earlier than 1.4.4-7etch8 AND libkrb53 is earlier than 1.4.4-7etch8 AND libkrb5-dev is earlier than 1.4.4-7etch8 AND krb5-ftpd is earlier than 1.4.4-7etch8 AND krb5-admin-server is earlier than 1.4.4-7etch8 AND libkadm55 is earlier than 1.4.4-7etch8 AND libkrb5-dbg is earlier than 1.4.4-7etch8 AND krb5-user is earlier than 1.4.4-7etch8 AND krb5-clients is earlier than 1.4.4-7etch8 AND krb5-kdc is earlier than 1.4.4-7etch8

Definition Id: oval:org.mitre.oval:def:8094

Oval ID:	oval:org.mitre.oval:def:8094
Title:	DSA-1524 krb5 -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the kdc component of the krb5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identifies the following problems: An unauthenticated remote attacker may cause a krb4-enabled KDC to crash, expose information, or execute arbitrary code. Successful exploitation of this vulnerability could compromise the Kerberos key database and host security on the KDC host. An unauthenticated remote attacker may cause a krb4-enabled KDC to expose information. It is theoretically possible for the exposed information to include secret key data on some platforms. An unauthenticated remote attacker can cause memory corruption in the kadmind process, which is likely to cause kadmind to crash, resulting in a denial of service. It is at least theoretically possible for such corruption to result in database corruption or arbitrary code execution, though we have no such exploit and are not aware of any such exploits in use in the wild. In versions of MIT Kerberos shipped by Debian, this bug can only be triggered in configurations that allow large numbers of open file descriptors in a process.
Family:	unix	Class:	patch
Reference(s):	DSA-1524 CVE-2008-0062 CVE-2008-0063 CVE-2008-0947	Version:	3
Platform(s):	Debian GNU/Linux 4.0 Debian GNU/Linux 3.1	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.4.4-7etch5 AND krb5-rsh-server is earlier than 1.4.4-7etch5 AND krb5-telnetd is earlier than 1.4.4-7etch5 AND libkrb5-dev is earlier than 1.4.4-7etch5 AND libkrb53 is earlier than 1.4.4-7etch5 AND krb5-ftpd is earlier than 1.4.4-7etch5 AND krb5-admin-server is earlier than 1.4.4-7etch5 AND libkadm55 is earlier than 1.4.4-7etch5 AND libkrb5-dbg is earlier than 1.4.4-7etch5 AND krb5-user is earlier than 1.4.4-7etch5 AND krb5-clients is earlier than 1.4.4-7etch5 AND krb5-kdc is earlier than 1.4.4-7etch5 OR Release section Debian GNU/Linux 3.1 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.3.6-2sarge6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is m68k AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is ia64 AND Installed architecture is mips AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server is earlier than 1.3.6-2sarge6 AND krb5-telnetd is earlier than 1.3.6-2sarge6 AND libkrb53 is earlier than 1.3.6-2sarge6 AND libkrb5-dev is earlier than 1.3.6-2sarge6 AND krb5-ftpd is earlier than 1.3.6-2sarge6 AND libkadm55 is earlier than 1.3.6-2sarge6 AND krb5-user is earlier than 1.3.6-2sarge6 AND krb5-kdc is earlier than 1.3.6-2sarge6 AND krb5-clients is earlier than 1.3.6-2sarge6 AND krb5-admin-server is earlier than 1.3.6-2sarge6

Definition Id: oval:org.mitre.oval:def:8181

Oval ID:	oval:org.mitre.oval:def:8181
Title:	DSA-1766 krb5 -- several vulnerabilities
Description:	Several vulnerabilities have been found in the MIT reference implementation of Kerberos V5, a system for authenticating users and services on a network. The Common Vulnerabilities and Exposures project identified the following problems: The Apple Product Security team discovered that the SPNEGO GSS-API mechanism suffers of a missing bounds check when reading a network input buffer which results in an invalid read crashing the application or possibly leaking information. Under certain conditions the SPNEGO GSS-API mechanism references a null pointer which crashes the application using the library. An incorrect length check inside the ASN.1 decoder of the MIT krb5 implementation allows an unauthenticated remote attacker to crash of the kinit or KDC program. Under certain conditions the ASN.1 decoder of the MIT krb5 implementation frees an uninitialised pointer which could lead to denial of service and possibly arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-1766 CVE-2009-0844 CVE-2009-0845 CVE-2009-0847 CVE-2009-0846	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	krb5
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.6.dfsg.4~beta1-5lenny1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section krb5-rsh-server is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc-ldap is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-telnetd is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dev is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb53 is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-ftpd is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-pkinit is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkadm55 is earlier than 1.6.dfsg.4~beta1-5lenny1 AND libkrb5-dbg is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-user is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-kdc is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-clients is earlier than 1.6.dfsg.4~beta1-5lenny1 AND krb5-admin-server is earlier than 1.6.dfsg.4~beta1-5lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND krb5-doc is earlier than 1.4.4-7etch7 AND krb5-rsh-server is earlier than 1.4.4-7etch7 AND krb5-telnetd is earlier than 1.4.4-7etch7 AND libkrb5-dev is earlier than 1.4.4-7etch7 AND libkrb53 is earlier than 1.4.4-7etch7 AND krb5-ftpd is earlier than 1.4.4-7etch7 AND krb5-admin-server is earlier than 1.4.4-7etch7 AND libkadm55 is earlier than 1.4.4-7etch7 AND libkrb5-dbg is earlier than 1.4.4-7etch7 AND krb5-user is earlier than 1.4.4-7etch7 AND krb5-clients is earlier than 1.4.4-7etch7 AND krb5-kdc is earlier than 1.4.4-7etch7

Definition Id: oval:org.mitre.oval:def:8192

Oval ID:	oval:org.mitre.oval:def:8192
Title:	Integer Overflow Security Vulnerability in AES and RC4 Decryption in the Solaris Kerberos Crypto Library May Lead to Execution of Arbitrary Code or a Denial of Service (DoS)
Description:	Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4212	Version:	2
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Software Section Solaris 10 (SPARC) meets Sun Alert 275530 Solaris 10 (SPARC) is installed AND NOT Patch 141500-06 or later installed OR Solaris 10 (x86) meets Sun Alert 275530 Solaris 10 (x86) is installed AND NOT Patch 141501-07 or later installed AND /etc/krb5/krb5.conf is configured with a kerberos domain

Definition Id: oval:org.mitre.oval:def:9209

Oval ID:	oval:org.mitre.oval:def:9209
Title:	Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.
Description:	Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0948	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section krb5-workstation is earlier than 0:1.2.7-68 AND krb5 is earlier than 0:1.2.7-68 AND krb5-libs is earlier than 0:1.2.7-68 AND krb5-server is earlier than 0:1.2.7-68 AND krb5-devel is earlier than 0:1.2.7-68

Definition Id: oval:org.mitre.oval:def:9496

Oval ID:	oval:org.mitre.oval:def:9496
Title:	KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Description:	KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0062	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section krb5-workstation is earlier than 0:1.2.7-68 AND krb5 is earlier than 0:1.2.7-68 AND krb5-libs is earlier than 0:1.2.7-68 AND krb5-server is earlier than 0:1.2.7-68 AND krb5-devel is earlier than 0:1.2.7-68 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section krb5-workstation is earlier than 0:1.3.4-54.el4_6.1 AND krb5 is earlier than 0:1.3.4-54.el4_6.1 AND krb5-libs is earlier than 0:1.3.4-54.el4_6.1 AND krb5-server is earlier than 0:1.3.4-54.el4_6.1 AND krb5-devel is earlier than 0:1.3.4-54.el4_6.1 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section krb5-workstation is earlier than 0:1.6.1-17.el5_1.1 AND krb5 is earlier than 0:1.6.1-17.el5_1.1 AND krb5-libs is earlier than 0:1.6.1-17.el5_1.1 AND krb5-server is earlier than 0:1.6.1-17.el5_1.1 AND krb5-devel is earlier than 0:1.6.1-17.el5_1.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Mac Os X cpe:2.3:a:apple:mac_os_x:10.5.6:::::::* cpe:2.3:a:apple:mac_os_x::::::::	2
Application	Mit Kerberos cpe:2.3:a:mit:kerberos:5-1.6.3:::::::* cpe:2.3:a:mit:kerberos:5-1.5.4:::::::*	2
Application	Mit Kerberos 5 cpe:2.3:a:mit:kerberos_5:1.8.3:::::::* cpe:2.3:a:mit:kerberos_5:1.8.2:::::::* cpe:2.3:a:mit:kerberos_5:1.8.1:::::::* cpe:2.3:a:mit:kerberos_5:1.8:::::::* cpe:2.3:a:mit:kerberos_5:1.7.1:::::::* cpe:2.3:a:mit:kerberos_5:1.7:::::::* cpe:2.3:a:mit:kerberos_5:1.6.3_kdc:::::::* cpe:2.3:a:mit:kerberos_5:1.6.3:::::::* cpe:2.3:a:mit:kerberos_5:1.6.2:::::::* cpe:2.3:a:mit:kerberos_5:1.6.1:::::::* cpe:2.3:a:mit:kerberos_5:1.6:::::::* cpe:2.3:a:mit:kerberos_5:1.5.3:::::::* cpe:2.3:a:mit:kerberos_5:1.5.2:::::::* cpe:2.3:a:mit:kerberos_5:1.5.1:::::::* cpe:2.3:a:mit:kerberos_5:1.5:::::::* cpe:2.3:a:mit:kerberos_5:1.4.4:::::::* cpe:2.3:a:mit:kerberos_5:1.4.3:::::::* cpe:2.3:a:mit:kerberos_5:1.4.2:::::::* cpe:2.3:a:mit:kerberos_5:1.4.1:::::::* cpe:2.3:a:mit:kerberos_5:1.4:::::::* cpe:2.3:a:mit:kerberos_5:1.3.6:::::::* cpe:2.3:a:mit:kerberos_5:1.3.5:::::::* cpe:2.3:a:mit:kerberos_5:1.3.4:::::::* cpe:2.3:a:mit:kerberos_5:1.3.3:::::::* cpe:2.3:a:mit:kerberos_5:1.3.2:::::::* cpe:2.3:a:mit:kerberos_5:1.3.1:::::::* cpe:2.3:a:mit:kerberos_5:1.3:alpha1:::::: cpe:2.3:a:mit:kerberos_5:1.3:-:::::: cpe:2.3:a:mit:kerberos_5:1.2.8:::::::* cpe:2.3:a:mit:kerberos_5:1.2.7:::::::* cpe:2.3:a:mit:kerberos_5:1.2.6:::::::* cpe:2.3:a:mit:kerberos_5:1.2.5:::::::* cpe:2.3:a:mit:kerberos_5:1.2.4:::::::* cpe:2.3:a:mit:kerberos_5:1.2.3:::::::* cpe:2.3:a:mit:kerberos_5:1.2.2:::::::* cpe:2.3:a:mit:kerberos_5:1.2.1:::::::* cpe:2.3:a:mit:kerberos_5:1.2:beta2:::::: cpe:2.3:a:mit:kerberos_5:1.2:beta1:::::: cpe:2.3:a:mit:kerberos_5:1.2:-:::::: cpe:2.3:a:mit:kerberos_5:1.1.1:::::::* cpe:2.3:a:mit:kerberos_5:1.1:::::::* cpe:2.3:a:mit:kerberos_5:1.0.6:::::::* cpe:2.3:a:mit:kerberos_5:1.0:-:::::: cpe:2.3:a:mit:kerberos_5:::::::: cpe:2.3:a:mit:kerberos_5:-:::::::*	45
Os	Apple Mac Os X cpe:2.3:o:apple:mac_os_x:10.5.6:::::::* cpe:2.3:o:apple:mac_os_x:10.5.5:::::::* cpe:2.3:o:apple:mac_os_x:10.5.4:::::::* cpe:2.3:o:apple:mac_os_x:10.5.3:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:::::: cpe:2.3:o:apple:mac_os_x:10.5.1:::::::* cpe:2.3:o:apple:mac_os_x:10.5.0:::::::* cpe:2.3:o:apple:mac_os_x:10.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.9:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8::macbook::::: cpe:2.3:o:apple:mac_os_x:10.4.8::mac_mini::::: cpe:2.3:o:apple:mac_os_x:10.4.8::macbook_pro::::: cpe:2.3:o:apple:mac_os_x:10.4.7:::::::* cpe:2.3:o:apple:mac_os_x:10.4.6:::::::* cpe:2.3:o:apple:mac_os_x:10.4.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.4:::::::* cpe:2.3:o:apple:mac_os_x:10.4.3:::::::* cpe:2.3:o:apple:mac_os_x:10.4.2:::::::* cpe:2.3:o:apple:mac_os_x:10.4.11:::::::* cpe:2.3:o:apple:mac_os_x:10.4.10:::::::* cpe:2.3:o:apple:mac_os_x:10.4.1:::::::* cpe:2.3:o:apple:mac_os_x:10.4.0:::::::* cpe:2.3:o:apple:mac_os_x:10.4.:::::::* cpe:2.3:o:apple:mac_os_x:10.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.9:::::::* cpe:2.3:o:apple:mac_os_x:10.3.8:::::::* cpe:2.3:o:apple:mac_os_x:10.3.7:::::::* cpe:2.3:o:apple:mac_os_x:10.3.6:::::::* cpe:2.3:o:apple:mac_os_x:10.3.5:::::::* cpe:2.3:o:apple:mac_os_x:10.3.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.3:::::::* cpe:2.3:o:apple:mac_os_x:10.3.2:::::::* cpe:2.3:o:apple:mac_os_x:10.3.1:::::::* cpe:2.3:o:apple:mac_os_x:10.3.0:::::::* cpe:2.3:o:apple:mac_os_x:10.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.8:::::::* cpe:2.3:o:apple:mac_os_x:10.2.7:::::::* cpe:2.3:o:apple:mac_os_x:10.2.6:::::::* cpe:2.3:o:apple:mac_os_x:10.2.5:::::::* cpe:2.3:o:apple:mac_os_x:10.2.4:::::::* cpe:2.3:o:apple:mac_os_x:10.2.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.2:::::::* cpe:2.3:o:apple:mac_os_x:10.2.1:::::::* cpe:2.3:o:apple:mac_os_x:10.2.0:::::::* cpe:2.3:o:apple:mac_os_x:10.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.5:::::::* cpe:2.3:o:apple:mac_os_x:10.1.4:::::::* cpe:2.3:o:apple:mac_os_x:10.1.3:::::::* cpe:2.3:o:apple:mac_os_x:10.1.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.1:::::::* cpe:2.3:o:apple:mac_os_x:10.1.0:::::::* cpe:2.3:o:apple:mac_os_x:10.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.4:::::::* cpe:2.3:o:apple:mac_os_x:10.0.3:::::::* cpe:2.3:o:apple:mac_os_x:10.0.2:::::::* cpe:2.3:o:apple:mac_os_x:10.0.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.0:::::::* cpe:2.3:o:apple:mac_os_x:10.0:::::::* cpe:2.3:o:apple:mac_os_x:::::::: cpe:2.3:o:apple:mac_os_x:-:::::::*	62
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	6
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:4.0:::::::* cpe:2.3:o:debian:debian_linux:3.1:::::::*	2
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:10:::::::* cpe:2.3:o:fedoraproject:fedora:9:::::::* cpe:2.3:o:fedoraproject:fedora:8:::::::* cpe:2.3:o:fedoraproject:fedora:7:::::::*	4
Os	Redhat Enterprise Linux cpe:2.3:o:redhat:enterprise_linux:4.0:::::::*	1
Os	Redhat Enterprise Linux Desktop cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:::::::*	2
Os	Redhat Enterprise Linux Eus cpe:2.3:o:redhat:enterprise_linux_eus:4.7:::::::*	1
Os	Redhat Enterprise Linux Server cpe:2.3:o:redhat:enterprise_linux_server:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:3.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:2.0:::::::*	3
Os	Redhat Enterprise Linux Workstation cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:::::::*	3

OpenVAS Exploits

Date	Description
2012-04-16	Name : VMSA-2010-0009: ESXi utilities and ESX Service Console third party updates File : nvt/gb_VMSA-2010-0009.nasl
2012-03-16	Name : VMSA-2011-0012.3 VMware ESXi and ESX updates to third party libraries and ESX... File : nvt/gb_VMSA-2011-0012.nasl
2012-03-15	Name : VMSA-2010-0016 VMware ESXi and ESX third party updates for Service Console an... File : nvt/gb_VMSA-2010-0016.nasl
2012-03-15	Name : VMSA-2011-0007 VMware ESXi and ESX Denial of Service and third party updates ... File : nvt/gb_VMSA-2011-0007.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201201-13 (mit-krb5) File : nvt/glsa_201201_13.nasl
2011-11-18	Name : Fedora Update for krb5 FEDORA-2011-14650 File : nvt/gb_fedora_2011_14650_krb5_fc14.nasl
2011-08-26	Name : Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001) File : nvt/secpod_macosx_su11-001.nasl
2011-08-09	Name : CentOS Update for krb5-devel CESA-2009:0408 centos5 i386 File : nvt/gb_CESA-2009_0408_krb5-devel_centos5_i386.nasl
2011-08-09	Name : CentOS Update for krb5-devel CESA-2010:0926 centos5 i386 File : nvt/gb_CESA-2010_0926_krb5-devel_centos5_i386.nasl
2011-08-09	Name : CentOS Update for krb5-devel CESA-2010:0029 centos5 i386 File : nvt/gb_CESA-2010_0029_krb5-devel_centos5_i386.nasl
2011-08-09	Name : CentOS Update for krb5-devel CESA-2009:0410 centos3 i386 File : nvt/gb_CESA-2009_0410_krb5-devel_centos3_i386.nasl
2011-08-09	Name : CentOS Update for krb5 CESA-2009:0410-01 centos2 i386 File : nvt/gb_CESA-2009_0410-01_krb5_centos2_i386.nasl
2011-08-09	Name : CentOS Update for krb5-devel CESA-2009:0409 centos4 i386 File : nvt/gb_CESA-2009_0409_krb5-devel_centos4_i386.nasl
2011-05-05	Name : Fedora Update for krb5 FEDORA-2011-5343 File : nvt/gb_fedora_2011_5343_krb5_fc13.nasl
2011-05-05	Name : Fedora Update for krb5 FEDORA-2011-5345 File : nvt/gb_fedora_2011_5345_krb5_fc14.nasl
2011-03-25	Name : Fedora Update for krb5 FEDORA-2011-3462 File : nvt/gb_fedora_2011_3462_krb5_fc14.nasl
2011-03-25	Name : Fedora Update for krb5 FEDORA-2011-3464 File : nvt/gb_fedora_2011_3464_krb5_fc13.nasl
2011-02-18	Name : Fedora Update for krb5 FEDORA-2011-1225 File : nvt/gb_fedora_2011_1225_krb5_fc14.nasl
2011-02-18	Name : Fedora Update for krb5 FEDORA-2011-1210 File : nvt/gb_fedora_2011_1210_krb5_fc13.nasl
2011-01-24	Name : FreeBSD Ports: krb5 File : nvt/freebsd_krb59.nasl
2011-01-21	Name : HP-UX Update for Kerberos HPSBUX02623 File : nvt/gb_hp_ux_HPSBUX02623.nasl
2010-12-23	Name : Fedora Update for krb5 FEDORA-2010-18425 File : nvt/gb_fedora_2010_18425_krb5_fc13.nasl
2010-12-23	Name : Ubuntu Update for krb5 vulnerabilities USN-1030-1 File : nvt/gb_ubuntu_USN_1030_1.nasl
2010-12-23	Name : Fedora Update for krb5 FEDORA-2010-18409 File : nvt/gb_fedora_2010_18409_krb5_fc14.nasl
2010-12-09	Name : Mandriva Update for krb5 MDVSA-2010:246 (krb5) File : nvt/gb_mandriva_MDVSA_2010_246.nasl
2010-12-09	Name : RedHat Update for krb5 RHSA-2010:0926-01 File : nvt/gb_RHSA-2010_0926-01_krb5.nasl
2010-12-09	Name : CentOS Update for krb5-devel CESA-2010:0926 centos4 i386 File : nvt/gb_CESA-2010_0926_krb5-devel_centos4_i386.nasl
2010-12-09	Name : Mandriva Update for krb5 MDVSA-2010:245 (krb5) File : nvt/gb_mandriva_MDVSA_2010_245.nasl
2010-05-28	Name : Fedora Update for krb5 FEDORA-2010-8796 File : nvt/gb_fedora_2010_8796_krb5_fc11.nasl
2010-05-28	Name : Fedora Update for krb5 FEDORA-2010-8805 File : nvt/gb_fedora_2010_8805_krb5_fc12.nasl
2010-05-12	Name : Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002 File : nvt/macosx_upd_10_5_7_secupd_2009-002.nasl
2010-04-29	Name : Fedora Update for krb5 FEDORA-2010-7130 File : nvt/gb_fedora_2010_7130_krb5_fc12.nasl
2010-04-09	Name : Fedora Update for krb5 FEDORA-2010-6108 File : nvt/gb_fedora_2010_6108_krb5_fc11.nasl
2010-03-31	Name : Fedora Update for krb5 FEDORA-2010-4677 File : nvt/gb_fedora_2010_4677_krb5_fc12.nasl
2010-03-02	Name : Fedora Update for krb5 FEDORA-2010-0503 File : nvt/gb_fedora_2010_0503_krb5_fc12.nasl
2010-03-02	Name : Fedora Update for krb5 FEDORA-2010-0515 File : nvt/gb_fedora_2010_0515_krb5_fc11.nasl
2010-03-02	Name : Fedora Update for krb5 FEDORA-2010-1722 File : nvt/gb_fedora_2010_1722_krb5_fc12.nasl
2010-02-03	Name : Solaris Update for kinit 141501-06 File : nvt/gb_solaris_141501_06.nasl
2010-02-03	Name : Solaris Update for kinit 141500-05 File : nvt/gb_solaris_141500_05.nasl
2010-01-25	Name : SuSE Update for krb5 SUSE-SA:2010:006 File : nvt/gb_suse_2010_006.nasl
2010-01-20	Name : Kerberos5 Multiple Integer Underflow Vulnerabilities File : nvt/gb_kerberos5_mult_int_underflow_vuln.nasl
2010-01-19	Name : RedHat Update for krb5 RHSA-2010:0029-01 File : nvt/gb_RHSA-2010_0029-01_krb5.nasl
2010-01-19	Name : Mandriva Update for krb5 MDVSA-2010:006 (krb5) File : nvt/gb_mandriva_MDVSA_2010_006.nasl
2010-01-19	Name : CentOS Update for krb5-devel CESA-2010:0029 centos3 i386 File : nvt/gb_CESA-2010_0029_krb5-devel_centos3_i386.nasl
2010-01-19	Name : CentOS Update for krb5-devel CESA-2010:0029 centos4 i386 File : nvt/gb_CESA-2010_0029_krb5-devel_centos4_i386.nasl
2010-01-19	Name : CentOS Update for krb5-devel CESA-2010:0029 centos4 x86_64 File : nvt/gb_CESA-2010_0029_krb5-devel_centos4_x86_64.nasl
2010-01-19	Name : Ubuntu Update for krb5 vulnerability USN-881-1 File : nvt/gb_ubuntu_USN_881_1.nasl
2010-01-19	Name : CentOS Update for krb5-devel CESA-2010:0029 centos3 x86_64 File : nvt/gb_CESA-2010_0029_krb5-devel_centos3_x86_64.nasl
2009-12-14	Name : Mandriva Security Advisory MDVSA-2009:098-1 (krb5) File : nvt/mdksa_2009_098_1.nasl
2009-11-17	Name : Mac OS X Version File : nvt/macosx_version.nasl
2009-10-13	Name : Solaris Update for pam_krb5.so.1 140130-10 File : nvt/gb_solaris_140130_10.nasl
2009-10-13	Name : Solaris Update for pam_krb5.so.1 140074-09 File : nvt/gb_solaris_140074_09.nasl
2009-10-13	Name : Solaris Update for krb5, gss 112908-36 File : nvt/gb_solaris_112908_36.nasl
2009-10-13	Name : Solaris Update for Supplemental Encryption Kerberos V5 112390-15 File : nvt/gb_solaris_112390_15.nasl
2009-10-13	Name : Solaris Update for Supplemental Encryption Kerberos V5 112240-14 File : nvt/gb_solaris_112240_14.nasl
2009-10-13	Name : SLES10: Security update for Kerberos File : nvt/sles10_krb5.nasl
2009-10-11	Name : SLES11: Security update for Kerberos File : nvt/sles11_krb5.nasl
2009-09-23	Name : Solaris Update for krb5, gss 115168-21 File : nvt/gb_solaris_115168_21.nasl
2009-09-23	Name : Solaris Update for pam_krb5.so.1 140074-08 File : nvt/gb_solaris_140074_08.nasl
2009-09-23	Name : Solaris Update for pam_krb5.so.1 140130-09 File : nvt/gb_solaris_140130_09.nasl
2009-08-03	Name : HP-UX Update for Kerberos HPSBUX02421 File : nvt/gb_hp_ux_HPSBUX02421.nasl
2009-05-05	Name : Mandrake Security Advisory MDVSA-2009:098 (krb5) File : nvt/mdksa_2009_098.nasl
2009-04-28	Name : CentOS Security Advisory CESA-2009:0409 (krb5) File : nvt/ovcesa2009_0409.nasl
2009-04-15	Name : Gentoo Security Advisory GLSA 200904-09 (mit-krb5) File : nvt/glsa_200904_09.nasl
2009-04-15	Name : SuSE Security Advisory SUSE-SA:2009:019 (krb5) File : nvt/suse_sa_2009_019.nasl
2009-04-15	Name : RedHat Security Advisory RHSA-2009:0408 File : nvt/RHSA_2009_0408.nasl
2009-04-15	Name : CentOS Security Advisory CESA-2009:0410 (krb5) File : nvt/ovcesa2009_0410.nasl
2009-04-15	Name : CentOS Security Advisory CESA-2009:0408 (krb5) File : nvt/ovcesa2009_0408.nasl
2009-04-15	Name : Ubuntu USN-755-1 (krb5) File : nvt/ubuntu_755_1.nasl
2009-04-15	Name : RedHat Security Advisory RHSA-2009:0409 File : nvt/RHSA_2009_0409.nasl
2009-04-15	Name : RedHat Security Advisory RHSA-2009:0410 File : nvt/RHSA_2009_0410.nasl
2009-04-15	Name : Debian Security Advisory DSA 1766-1 (krb5) File : nvt/deb_1766_1.nasl
2009-04-15	Name : Fedora Core 9 FEDORA-2009-2834 (krb5) File : nvt/fcore_2009_2834.nasl
2009-04-15	Name : Fedora Core 10 FEDORA-2009-2852 (krb5) File : nvt/fcore_2009_2852.nasl
2009-04-09	Name : Mandriva Update for krb5 MDVSA-2008:069 (krb5) File : nvt/gb_mandriva_MDVSA_2008_069.nasl
2009-04-09	Name : Mandriva Update for krb5 MDVSA-2008:070 (krb5) File : nvt/gb_mandriva_MDVSA_2008_070.nasl
2009-03-23	Name : Ubuntu Update for krb5 vulnerabilities USN-587-1 File : nvt/gb_ubuntu_USN_587_1.nasl
2009-03-06	Name : RedHat Update for krb5 RHSA-2008:0181-01 File : nvt/gb_RHSA-2008_0181-01_krb5.nasl
2009-03-06	Name : RedHat Update for krb5 RHSA-2008:0180-01 File : nvt/gb_RHSA-2008_0180-01_krb5.nasl
2009-03-06	Name : RedHat Update for krb5 RHSA-2008:0164-01 File : nvt/gb_RHSA-2008_0164-01_krb5.nasl
2009-02-27	Name : CentOS Update for krb5-devel CESA-2008:0181 centos3 x86_64 File : nvt/gb_CESA-2008_0181_krb5-devel_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for krb5-devel CESA-2008:0180 centos4 i386 File : nvt/gb_CESA-2008_0180_krb5-devel_centos4_i386.nasl
2009-02-27	Name : CentOS Update for krb5-devel CESA-2008:0180 centos4 x86_64 File : nvt/gb_CESA-2008_0180_krb5-devel_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for krb5 CESA-2008:0181-01 centos2 i386 File : nvt/gb_CESA-2008_0181-01_krb5_centos2_i386.nasl
2009-02-27	Name : CentOS Update for krb5-devel CESA-2008:0181 centos3 i386 File : nvt/gb_CESA-2008_0181_krb5-devel_centos3_i386.nasl
2009-02-16	Name : Fedora Update for krb5 FEDORA-2008-2637 File : nvt/gb_fedora_2008_2637_krb5_fc7.nasl
2009-02-16	Name : Fedora Update for krb5 FEDORA-2008-2647 File : nvt/gb_fedora_2008_2647_krb5_fc8.nasl
2009-01-23	Name : SuSE Update for krb5 SUSE-SA:2008:016 File : nvt/gb_suse_2008_016.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200803-31 (mit-krb5) File : nvt/glsa_200803_31.nasl
2008-06-17	Name : Kerberos < 1.6.4 vulnerability File : nvt/kerberos_CB-A08-0044.nasl
2008-03-19	Name : Debian Security Advisory DSA 1524-1 (krb5) File : nvt/deb_1524_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
71972	Oracle Solaris Kerberos Checksum Acceptability Weakness KDC / KRB-SAFE Messag... Oracle Solaris contains a flaw in the Kerberos component related to the acceptability of checksums. This may allow a remote attacker to modify user-visible prompt text, modify a reponse to a KDC, or forge a KRB-SAFE message via unkeyed checksums or the use of RC4 keys.
69610	MIT Kerberos 5 (krb5) Checksum Acceptability Weakness KDC / KRB-SAFE Message ... MIT Kerberos 5 (krb5) contains a flaw related to the acceptability of checksums. This may allow a remote attacker to modify user-visible prompt text, modify a reponse to a KDC, or forge a KRB-SAFE message via unkeyed checksums or the use of RC4 keys.
61795	MIT Kerberos 5 (krb5) Crypto Library AES / RC4 Decryption Functionality Malfo...
53383	MIT Kerberos 5 (krb5) ASN.1 Decoder asn1_decode_generaltime() Function Remote...
43344	MIT Kerberos 5 (krb5) libgssrpc / kadmind RPC library (lib/rpc/rpc_dtablesize...
43343	MIT Kerberos 5 (krb5) libgssrpc / kadmind RPC Library File Descriptor Handlin...
43341	MIT Kerberos 5 KDC (krb5kdc) Arbitrary Memory Disclosure

Information Assurance Vulnerability Management (IAVM)

Date	Description
2011-10-27	IAVM : 2011-A-0147 - Multiple Vulnerabilities in VMware ESX and ESXi Severity : Category I - VMSKEY : V0030545
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Snort® IPS/IDS

Date	Description
2014-01-10	MIT Kerberos asn1_decode_generaltime uninitialized pointer free attempt RuleID : 17741 - Revision : 5 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date	Description
2016-03-08	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2010-0009_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0007_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0012_remote.nasl - Type : ACT_GATHER_INFO
2016-03-03	Name : The remote host is missing a security-related patch. File : vmware_VMSA-2009-0008_remote.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_kerberos_20130924_2.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2009-0003.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2011-0015.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_krb5-101201.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0164.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0180.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0181.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0408.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0409.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0410.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0029.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0926.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0182.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080318_krb5_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090407_krb5_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090407_krb5_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100112_krb5_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101130_krb5_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201201-13.nasl - Type : ACT_GATHER_INFO
2011-10-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0012.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_krb5-101201.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_krb5-101201.nasl - Type : ACT_GATHER_INFO
2011-04-29	Name : The remote VMware ESXi / ESX host is missing a security-related patch. File : vmware_VMSA-2011-0007.nasl - Type : ACT_GATHER_INFO
2011-03-22	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_6_7.nasl - Type : ACT_GATHER_INFO
2011-03-22	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-001.nasl - Type : ACT_GATHER_INFO
2011-01-24	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_41775.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_11bbccbc03ee11e0bcdb001fc61c2a55.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2010-18425.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1030-1.nasl - Type : ACT_GATHER_INFO
2010-12-09	Name : The remote Fedora host is missing a security update. File : fedora_2010-18409.nasl - Type : ACT_GATHER_INFO
2010-12-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_krb5-101117.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2129.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0926.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0926.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0925.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-245.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-246.nasl - Type : ACT_GATHER_INFO
2010-11-16	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2010-0016.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_krb5-6776.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-0515.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-0503.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_4.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote host is missing a Mac OS X update that fixes a security issue. File : macosx_SecUpd2010-004.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2010-0009.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1969.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote openSUSE host is missing a security update. File : suse_11_2_krb5-100113.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote openSUSE host is missing a security update. File : suse_11_1_krb5-100113.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote openSUSE host is missing a security update. File : suse_11_0_krb5-100113.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_krb5-6775.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_krb5-100113.nasl - Type : ACT_GATHER_INFO
2010-01-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-006.nasl - Type : ACT_GATHER_INFO
2010-01-13	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-881-1.nasl - Type : ACT_GATHER_INFO
2010-01-13	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0029.nasl - Type : ACT_GATHER_INFO
2010-01-13	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0029.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0409.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0408.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0164.nasl - Type : ACT_GATHER_INFO
2009-10-05	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_39774.nasl - Type : ACT_GATHER_INFO
2009-10-05	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_39766.nasl - Type : ACT_GATHER_INFO
2009-10-05	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_39765.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_krb5-6140.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_krb5-090406.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2009-0008.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2008-0009.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_krb5-090406.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_krb5-090406.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_5_7.nasl - Type : ACT_GATHER_INFO
2009-05-13	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2009-002.nasl - Type : ACT_GATHER_INFO
2009-04-28	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-098.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-069.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-070.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-755-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-2852.nasl - Type : ACT_GATHER_INFO
2009-04-11	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200904-09.nasl - Type : ACT_GATHER_INFO
2009-04-09	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1766.nasl - Type : ACT_GATHER_INFO
2009-04-09	Name : The remote openSUSE host is missing a security update. File : suse_krb5-6139.nasl - Type : ACT_GATHER_INFO
2009-04-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-2834.nasl - Type : ACT_GATHER_INFO
2009-04-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0408.nasl - Type : ACT_GATHER_INFO
2009-04-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0409.nasl - Type : ACT_GATHER_INFO
2009-04-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0410.nasl - Type : ACT_GATHER_INFO
2009-04-08	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0410.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Fedora host is missing a security update. File : fedora_2008-2647.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200803-31.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Fedora host is missing a security update. File : fedora_2008-2637.nasl - Type : ACT_GATHER_INFO
2008-03-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0180.nasl - Type : ACT_GATHER_INFO
2008-03-21	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1524.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-587-1.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_krb5-5082.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote openSUSE host is missing a security update. File : suse_krb5-5081.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0181.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0180.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0164.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2008-002.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0181.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
Capec ID(s)	3
CWE ID(s)	6
Oval ID(s)	28
CPE ID(s)	133
osvdb(s)	7
Openvas Exploit(s)	91
IAVM(s)	2
Snort® Rule(s)	1
Nessus® Exploit(s)	98

	Related
10	CVE-2009-4212
10	CVE-2009-0846
10	CVE-2008-0947
9.8	CVE-2008-0062
9.3	CVE-2008-0948
3.7	CVE-2010-1323
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)