oval:org.mitre.oval:def:6301

Definition Id: oval:org.mitre.oval:def:6301

Oval ID:	oval:org.mitre.oval:def:6301
Title:	HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code
Description:	The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before 1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid DER encoding that triggers a free of an uninitialized pointer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0846	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02421 HP Release B.11.23 AND filesets tests krb5client.KRB5-64SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5-64SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5-PRG-A version is less than D.1.6.2.01 AND krb5client.KRB5-RUN-A version is less than D.1.6.2.01 AND krb5client.KRB5-SHLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5IA32SLIB-A version is less than D.1.6.2.01 AND krb5client.KRB5IA64SLIB-A version is less than D.1.6.2.01 OR Criteria meets HP Security Bulletin HPSBUX02421 HP Release B.11.11 AND filesets tests krb5client.KRB5-64SLIB-A version is less than C.1.3.5.09 AND krb5client.KRB5-PRG-A version is less than C.1.3.5.09 AND krb5client.KRB5-RUN-A version is less than C.1.3.5.09 AND krb5client.KRB5-SHLIB-A version is less than C.1.3.5.09 OR Criteria meets HP Security Bulletin HPSBUX02421 HP-UX B.11.31 AND filesets tests krb5client.KRB5-64SLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5-PRG-A version is less than E.1.6.2.03 AND krb5client.KRB5-RUN-A version is less than E.1.6.2.03 AND krb5client.KRB5-SHLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5IA32SLIB-A version is less than E.1.6.2.03 AND krb5client.KRB5IA64SLIB-A version is less than E.1.6.2.03

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0290s

Facebook rss twitter linkedin mail