CVE-2009-0847

概要

参考情報

• lists.apple.com/archives/security-announce/2009/May/msg00002.html
• marc.info
• secunia.com/advisories/34594
• secunia.com/advisories/34617
• secunia.com/advisories/34622
• secunia.com/advisories/34628
• secunia.com/advisories/34637
• secunia.com/advisories/34640
• secunia.com/advisories/34734
• secunia.com/advisories/35074
• security.gentoo.org/glsa/glsa-200904-09.xml
• sunsolve.sun.com/search/document.do
• support.apple.com/kb/HT3549
• support.avaya.com/elmodocs2/security/ASA-2009-142.htm
• support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html

kerberos のその他の脆弱性

• CVE-2018-20217中 5.3A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket us…
• CVE-2018-5710中 6.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a paramet…
• CVE-2018-5709高 7.5An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that ca…
• CVE-2017-11368中 6.5In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2P…
• CVE-2014-5354低 3.5plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows …