oval:org.mitre.oval:def:29035
| Definition Id: oval:org.mitre.oval:def:29035 | |||
| Oval ID: | oval:org.mitre.oval:def:29035 | ||
| Title: | AIX NAS denial of service vulnerability | ||
| Description: | The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2014-5352 | Version: | 4 |
| Platform(s): | IBM AIX 6.1 IBM AIX 7.1 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:18828 | |||
| Oval ID: | oval:org.mitre.oval:def:18828 | ||
| Title: | IBM AIX 7.1 is installed | ||
| Description: | The operating system installed on the system is IBM AIX 7.1. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:ibm:aix:7.1 | Version: | 3 |
| Platform(s): | IBM AIX 7.1 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:29035 | |||
| Definition Id: oval:org.mitre.oval:def:5267 | |||
| Oval ID: | oval:org.mitre.oval:def:5267 | ||
| Title: | IBM AIX 6.1 is installed | ||
| Description: | The operating system installed on the system is IBM AIX 6.1. | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:ibm:aix:6.1 | Version: | 3 |
| Platform(s): | IBM AIX 6.1 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:29035 | |||
