An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)

Multiple input validation flaws were found in the MIT Kerberos GSS-API library's implementation of the SPNEGO mechanism. A remote attacker could use these flaws to crash any network service utilizing the MIT Kerberos GSS-API library to authenticate users or, possibly, leak portions of the service's memory. (CVE-2009-0844, CVE-2009-0845)

Clients sending negotiation requests with invalid flags could crash the kerberos server (CVE-2009-0845).

GSS-API clients could crash when reading from an invalid address space (CVE-2009-0844).

Invalid length checks could crash applications using the kerberos ASN.1 parser (CVE-2009-0847).

Under certain circumstances the ASN.1 parser could free an uninitialized pointer which could crash a kerberos server or even lead to execution of arbitrary code (CVE-2009-0846).

a. Service Console package krb5 update

   Kerberos is a network authentication protocol. It is designed to    provide strong authentication for client/server applications by    using secret-key cryptography.

   An input validation flaw in the asn1_decode_generaltime function in    MIT Kerberos 5 before 1.6.4 allows remote attackers to cause a    denial of service or possibly execute arbitrary code via vectors    involving an invalid DER encoding that triggers a free of an    uninitialized pointer.

   A remote attacker could use this flaw to crash a network service    using the MIT Kerberos library, such as kadmind or krb5kdc, by    causing it to dereference or free an uninitialized pointer or,    possibly, execute arbitrary code with the privileges of the user    running the service.

   NOTE: ESX by default is unaffected by this issue, the daemons    kadmind and krb5kdc are not installed in ESX.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2009-0846 to this issue.

   In addition the ESX 4.0 Service Console krb5 package was also    updated for CVE-2009-0845, and CVE-2009-0844 and RHBA-2009-0135.

   MIT Kerberos versions 5 1.5 through 1.6.3 might allow remote    attackers to cause a denial of service by using invalid    ContextFlags data in the reqFlags field in a negTokenInit token.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0845 to this issue.

   MIT Kerberos 5 before version 1.6.4 might allow remote attackers to    cause a denial of service or possibly execute arbitrary code by    using vectors involving an invalid DER encoding that triggers a    free of an uninitialized pointer.

   The Common Vulnerabilities and Exposures Project (cve.mitre.org)    has assigned the name CVE-2009-0846 to this issue.

   For ESX 4.0, 3.5, 3.0.3 the Service Console package pam_krb5 has    also been upgraded.  For details on the non-security issues that    this upgrade addresses, refer to the respective KB article listed    in section 4 below.

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities :

  - An out-of-bounds read error exists in the MIT Kerberos     SPNEGO implementation in the get_input_token() function.
    A remote attacker can exploit this, via a crafted     length value, to cause a denial of service or to obtain     access to sensitive information. (CVE-2009-0844)

  - A NULL pointer dereference flaw exists in MIT Kerberos     in the spnego_gss_accept_sec_context() function when     SPNEGO is used. A remote attacker can exploit this, via     invalid ContextFlags data in the 'reqFlags' field within     a 'negTokenInit' token, to cause a denial of service.
    (CVE-2009-0845)

  - A flaw exists in the MIT Kerberos ASN.1 GeneralizedTime     decoder in the asn1_decode_generaltime() function. A     remote attacker can exploit this, via vectors involving     invalid DER encoding, to free an uninitialized pointer,     resulting in a denial of service or the execution of     arbitrary code. (CVE-2009-0846)

Updated krb5 packages that fix a security issue are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center (KDC).

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation One) decoder used by MIT Kerberos. A remote attacker could use this flaw to crash a network service using the MIT Kerberos library, such as kadmind or krb5kdc, by causing it to dereference or free an uninitialized pointer. (CVE-2009-0846)

All krb5 users should upgrade to these updated packages, which contain a backported patch to correct this issue. All running services using the MIT Kerberos libraries must be restarted for the update to take effect.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.7.  Mac OS X 10.5.7 contains security fixes for the following products : 

- Apache
- ATS
- BIND
- CFNetwork
- CoreGraphics
-Cscope
- CUPS
- Disk Images
- enscript
- Flash player
- Help Viewer
- iChat
- Internation Components for Unicode
- IPSec
- Kerberos
- Kernel
- Launch Services
- libxml
- Net-SNMP
- Network Time
- Networking
- OpenSSL
- PHP
- QuickDraw Manager
- ruby
- Safari
- Spotlight
- system_cmds
- telnet
- WebKit
- X11
- Terminal

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
60564	Scientific Linux Security Update : krb5 on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	critical
40253	openSUSE Security Update : krb5 (krb5-740)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
40393	VMSA-2009-0008 : ESX Service Console update for krb5	Nessus	VMware ESX Local Security Checks	2009/7/27	2021/1/6	critical
89114	VMware ESX Multiple Vulnerabilities (VMSA-2009-0008) (remote check)	Nessus	Misc.	2016/3/3	2021/1/6	critical
43740	CentOS 4 : krb5 (CESA-2009:0409)	Nessus	CentOS Local Security Checks	2010/1/6	2021/1/4	critical
5023	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	2004/8/18	2019/3/6	critical
800792	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection			high

检测

插件搜索

critical

critical

critical

critical

critical

critical

high