Логотип exploitDog
bind:"CVE-2014-9422"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2014-9422"

Количество 10

Количество 10

ubuntu логотип

CVE-2014-9422

больше 10 лет назад

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 6.1
EPSS: Низкий
redhat логотип

CVE-2014-9422

больше 10 лет назад

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 4.6
EPSS: Низкий
nvd логотип

CVE-2014-9422

больше 10 лет назад

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 6.1
EPSS: Низкий
debian логотип

CVE-2014-9422

больше 10 лет назад

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadm ...

CVSS2: 6.1
EPSS: Низкий
github логотип

GHSA-8qhp-h7xw-f46m

больше 3 лет назад

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0257-1

больше 10 лет назад

Security update for krb5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0290-2

больше 10 лет назад

Security update for krb5

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0290-1

больше 10 лет назад

Security update for krb5

EPSS: Низкий
oracle-oval логотип

ELSA-2015-0794

больше 10 лет назад

ELSA-2015-0794: krb5 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2015-0439

больше 10 лет назад

ELSA-2015-0439: krb5 security, bug fix and enhancement update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-9422

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 6.1
1%
Низкий
больше 10 лет назад
redhat логотип
CVE-2014-9422

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 4.6
1%
Низкий
больше 10 лет назад
nvd логотип
CVE-2014-9422

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

CVSS2: 6.1
1%
Низкий
больше 10 лет назад
debian логотип
CVE-2014-9422

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadm ...

CVSS2: 6.1
1%
Низкий
больше 10 лет назад
github логотип
GHSA-8qhp-h7xw-f46m

The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated users to bypass a kadmin/* authorization check and obtain administrative access by leveraging access to a two-component principal with an initial "kadmind" substring, as demonstrated by a "ka/x" principal.

1%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2015:0257-1

Security update for krb5

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0290-2

Security update for krb5

больше 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:0290-1

Security update for krb5

больше 10 лет назад
oracle-oval логотип
ELSA-2015-0794

ELSA-2015-0794: krb5 security update (MODERATE)

больше 10 лет назад
oracle-oval логотип
ELSA-2015-0439

ELSA-2015-0439: krb5 security, bug fix and enhancement update (MODERATE)

больше 10 лет назад

Уязвимостей на страницу