Priority LOW 35
Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos.
Vulnerabilities
4 records
TI-2007-05678 CVE-2007-5939 · GHSA-cfj4-7v4x-xmrv
The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate…
Priority MEDIUM 49
The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid usern…
TI-2006-02987 CVE-2006-3084 · GHSA-863q-qjw4-fmrr
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x…
Priority LOW 32
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which might allow local users to gain privi…
TI-2006-02986 CVE-2006-3083 · GHSA-fxvg-34mm-mrcp
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and…
Priority LOW 32
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and (b) Heimdal 0.7.2 and earlier, do not check return codes for setuid calls, which…