CVE-2012-6303 | | | 2013-10-28 | Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attac… |
CVE-2006-0677 | | | 2006-02-14 | telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown ve… |
CVE-2006-0582 | | | 2006-02-08 | Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbit… |
CVE-2004-0371 | | | 2004-05-04 | Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers… |
CVE-2002-1235 | | | 2002-11-04 | The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind… |
CVE-2002-1226 | | | 2002-10-28 | Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain… |
CVE-2002-1225 | | | 2002-10-28 | Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access. |
CVE-2002-0754 | | | 2002-08-12 | Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-init… |
CVE-2002-0600 | | | 2002-06-18 | Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive… |
CVE-2001-1444 | | | 2001-08-27 | The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the… |
CVE-2001-1443 | | | 2001-08-27 | KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows re… |
CVE-2001-0036 | | | 2001-02-16 | KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file. |
CVE-2001-0035 | | | 2001-02-16 | Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary command… |
CVE-2001-0034 | | | 2001-02-16 | KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and pos… |
CVE-2001-0033 | | | 2001-02-16 | KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using… |
CVE-1999-1099 | | | 1996-11-22 | Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the re… |