Multiple MIT Kerberos bugs updated since 01.09.2004
Published:		11.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		3965
Type:		remote
Level:		8/10
Description:		Multiple double free() problems, DoS.

Affected:		CISCO : Cisco VPN 3000
		MIT : krb5 1.3
		MIT : krb5 1.2
		IBM : IBM Network Authentication Service 1.3
		IBM : IBM Network Authentication Service 1.4
		SUN : Seam 1.0
		IBM : Tivoli Access Manager 5.1

Original document		SECUNIA, [SA13119] IBM Tivoli Access Manager for e-business Kerberos Vulnerabilities (11.11.2004)
		SECUNIA, [SA12694] AIX Network Authentication Service Multiple Vulnerabilities (02.10.2004)
		CERT, US-CERT Technical Cyber Security Alert TA04-247A -- Vulnerabilities in MIT Kerberos 5 (04.09.2004)
		MIT, MITKRB5-SA-2004-002: double-free vulnerabilities (02.09.2004)
		CISCO, Cisco Security Advisory: Vulnerabilities in Kerberos 5 Implementation (01.09.2004)
		Tom Yu, MITKRB5-SA-2004-003: ASN.1 decoder denial-of-service (01.09.2004)
		DEBIAN, [SECURITY] [DSA 543-1] New krb5 packages fix several vulnerabilities (01.09.2004)

Discuss:

Read or add your comments to this news (0 comments)