«
Expand/Collapse
138 items tagged "mit"
Related tags:
free memory [+],
null pointer dereference [+],
assertion failure [+],
vulnerability [+],
server stubs [+],
kerberos protocol [+],
mit kerberos [+],
src [+],
sec [+],
privilege escalation vulnerability [+],
ftp daemon [+],
code execution [+],
multiple [+],
kpropd [+],
hacks [+],
service vulnerability [+],
krb [+],
vulnerabilities [+],
telnetd [+],
spnego [+],
security advisory [+],
rc4 [+],
public key cryptography [+],
listening process [+],
invalid pointer [+],
effective group [+],
distribution center [+],
denial of service attacks [+],
denial of service attack [+],
decryption [+],
buffer overflow [+],
arbitrary code execution [+],
aes [+],
kdc [+],
krb5 [+],
uninitialized pointer [+],
mitkrb [+],
legitimate user [+],
input validation [+],
glsa [+],
crash [+],
null pointer [+],
denial of service [+],
kerberos 5 [+],
security [+],
gss api [+],
video [+],
tt race [+],
transportation [+],
tetris game [+],
tetris [+],
stack buffer [+],
shapes [+],
server [+],
segstick [+],
scale [+],
race organizers [+],
race [+],
programmable matter [+],
programmable [+],
principal name [+],
principal 2 [+],
origami [+],
misc [+],
massachusetts institute of technology [+],
local privilege escalation [+],
isle of man [+],
impromptu [+],
hacked [+],
force web [+],
esuperbike [+],
electric bikes [+],
dewalt cordless drills [+],
computer science department [+],
classic [+],
cheap transportation [+],
building [+],
buffer overflow vulnerability [+],
brute force [+],
airplane [+],
6 wheels [+],
checksum [+],
remote security [+],
kadmind [+],
memory corruption [+],
kerberos [+]
-
-
12:01
»
Hack a Day
Careful, this hack might foster doubts about the level of fun you’re having at you own Computer Science department. Last weekend a group of students at MIT pulled off a hack of great scale by turning a building into a Tetris game board. The structure in question is the Green Building on the Massachusetts Institute of Technology [...]
-
-
9:46
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-008 - The telnet daemon (telnetd) in MIT krb5 (and in krb5-appl after the applications were moved to a separate distribution for krb5-1.8) is vulnerable to a buffer overflow. The flaw does not require authentication to exploit. Exploit code is reported to be actively used in the wild.
-
9:46
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-008 - The telnet daemon (telnetd) in MIT krb5 (and in krb5-appl after the applications were moved to a separate distribution for krb5-1.8) is vulnerable to a buffer overflow. The flaw does not require authentication to exploit. Exploit code is reported to be actively used in the wild.
-
9:46
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-008 - The telnet daemon (telnetd) in MIT krb5 (and in krb5-appl after the applications were moved to a separate distribution for krb5-1.8) is vulnerable to a buffer overflow. The flaw does not require authentication to exploit. Exploit code is reported to be actively used in the wild.
-
-
17:43
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-007 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference in code that handles TGS (Ticket Granting Service) requests. The trigger condition is trivial to produce using unmodified client software, but requires the ability to authenticate as a principal in the KDC's realm.
-
17:43
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-007 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference in code that handles TGS (Ticket Granting Service) requests. The trigger condition is trivial to produce using unmodified client software, but requires the ability to authenticate as a principal in the KDC's realm.
-
17:43
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-007 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference in code that handles TGS (Ticket Granting Service) requests. The trigger condition is trivial to produce using unmodified client software, but requires the ability to authenticate as a principal in the KDC's realm.
-
-
16:02
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-006 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference if configured to use the LDAP back end. A trigger condition is publicly known but not known to be widely circulated. In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. No exploit is known to exist, but there is public evidence that the unidentified trigger condition occurs in the field. In releases krb5-1.8 and later, the KDC can crash due to a null pointer dereference. No exploit is known to exist.
-
16:02
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-006 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference if configured to use the LDAP back end. A trigger condition is publicly known but not known to be widely circulated. In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. No exploit is known to exist, but there is public evidence that the unidentified trigger condition occurs in the field. In releases krb5-1.8 and later, the KDC can crash due to a null pointer dereference. No exploit is known to exist.
-
16:02
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-006 - In releases krb5-1.9 and later, the KDC can crash due to a null pointer dereference if configured to use the LDAP back end. A trigger condition is publicly known but not known to be widely circulated. In releases krb5-1.8 and later, the KDC can crash due to an assertion failure. No exploit is known to exist, but there is public evidence that the unidentified trigger condition occurs in the field. In releases krb5-1.8 and later, the KDC can crash due to a null pointer dereference. No exploit is known to exist.
-
-
18:23
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-005 - A remote client of the GSS-API FTP daemon in the krb5-appl distribution can access files using the effective group ID that the FTP daemon process had when it started.
-
18:23
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-005 - A remote client of the GSS-API FTP daemon in the krb5-appl distribution can access files using the effective group ID that the FTP daemon process had when it started.
-
18:23
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-005 - A remote client of the GSS-API FTP daemon in the krb5-appl distribution can access files using the effective group ID that the FTP daemon process had when it started.
-
-
5:05
»
Hack a Day
While the Isle of Man typically plays host to an array of gas-powered superbikes screaming through villages and mountain passes at unbelievable speeds, the island’s TT Race is a bit different. Introduced in 2009 to offer a greener alternative to the traditional motorcycle race, organizers opened up the course to electric bikes of all kinds. [...]
-
-
9:33
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-004 - The password-changing capability of the MIT krb5 administration daemon (kadmind) has a bug that can cause it to attempt to free() an invalid pointer under certain error conditions. This can cause the daemon to crash or induce the execution of arbitrary code (which is believed to be difficult). No exploit that executes arbitrary code is known to exist, but it is easy to trigger a denial of service manually.
-
9:33
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-004 - The password-changing capability of the MIT krb5 administration daemon (kadmind) has a bug that can cause it to attempt to free() an invalid pointer under certain error conditions. This can cause the daemon to crash or induce the execution of arbitrary code (which is believed to be difficult). No exploit that executes arbitrary code is known to exist, but it is easy to trigger a denial of service manually.
-
9:33
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-004 - The password-changing capability of the MIT krb5 administration daemon (kadmind) has a bug that can cause it to attempt to free() an invalid pointer under certain error conditions. This can cause the daemon to crash or induce the execution of arbitrary code (which is believed to be difficult). No exploit that executes arbitrary code is known to exist, but it is easy to trigger a denial of service manually.
-
-
7:38
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-003 - The MIT Kerberos 5 Key Distribution Center (KDC) daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication (PKINIT) capability is enabled, resulting in daemon crash or arbitrary code execution (which is believed to be difficult).
-
7:38
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-003 - The MIT Kerberos 5 Key Distribution Center (KDC) daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication (PKINIT) capability is enabled, resulting in daemon crash or arbitrary code execution (which is believed to be difficult).
-
7:38
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-003 - The MIT Kerberos 5 Key Distribution Center (KDC) daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication (PKINIT) capability is enabled, resulting in daemon crash or arbitrary code execution (which is believed to be difficult).
-
-
17:31
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-002 - The MIT krb5 Key Distribution Center (KDC) daemon is vulnerable to denial of service attacks from unauthenticated remote attackers. CVE-2011-0281 and CVE-2011-0282 occur only in KDCs using LDAP back ends, but CVE-2011-0283 occurs in all krb5-1.9 KDCs.
-
17:31
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-002 - The MIT krb5 Key Distribution Center (KDC) daemon is vulnerable to denial of service attacks from unauthenticated remote attackers. CVE-2011-0281 and CVE-2011-0282 occur only in KDCs using LDAP back ends, but CVE-2011-0283 occurs in all krb5-1.9 KDCs.
-
17:31
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-002 - The MIT krb5 Key Distribution Center (KDC) daemon is vulnerable to denial of service attacks from unauthenticated remote attackers. CVE-2011-0281 and CVE-2011-0282 occur only in KDCs using LDAP back ends, but CVE-2011-0283 occurs in all krb5-1.9 KDCs.
-
14:50
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2011-001 - The MIT krb5 KDC database propagation daemon (kpropd) is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it can cause the termination of the listening process that spawned it, preventing the slave KDC it was running on from receiving database updates from the master KDC.
-
14:50
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2011-001 - The MIT krb5 KDC database propagation daemon (kpropd) is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it can cause the termination of the listening process that spawned it, preventing the slave KDC it was running on from receiving database updates from the master KDC.
-
14:50
»
Packet Storm Security Misc. Files
MIT krb5 Security Advisory 2011-001 - The MIT krb5 KDC database propagation daemon (kpropd) is vulnerable to a denial-of-service attack triggered by invalid network input. If a kpropd worker process receives invalid input that causes it to exit with an abnormal status, it can cause the termination of the listening process that spawned it, preventing the slave KDC it was running on from receiving database updates from the master KDC.
-
-
14:00
»
Hack a Day
If many of the readers out there longed for a Segway for Christmas but Santa didn’t bring you one, you are in luck. The aptly named Seg-Stick by [scolton] is a great way for cheap transportation. It uses a broomstick, along with two DeWalt cordless drills to power this bad boy on 6” wheels. Like [...]
-
-
21:43
»
Packet Storm Security Advisories
Multiple checksum handling vulnerabilities exist in Kerberos. These vulnerabilities are in the MIT implementation of Kerberos (krb5), but because these vulnerabilities arise from flaws in protocol handling logic, other implementations may also be vulnerable.
-
21:43
»
Packet Storm Security Recent Files
Multiple checksum handling vulnerabilities exist in Kerberos. These vulnerabilities are in the MIT implementation of Kerberos (krb5), but because these vulnerabilities arise from flaws in protocol handling logic, other implementations may also be vulnerable.
-
21:43
»
Packet Storm Security Misc. Files
Multiple checksum handling vulnerabilities exist in Kerberos. These vulnerabilities are in the MIT implementation of Kerberos (krb5), but because these vulnerabilities arise from flaws in protocol handling logic, other implementations may also be vulnerable.
-
-
17:14
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2010-006 - When the MIT krb5 KDC receives certain Kerberos TGS request messages, it may dereference an uninitialized pointer while processing authorization data, causing a crash, or in rare cases, unauthorized information disclosure, ticket modification, or execution of arbitrary code. The crash may be triggered by legitimate requests. This is an implementation vulnerability in MIT krb5, and not a vulnerability in the Kerberos protocol.
-
17:10
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2010-006 - When the MIT krb5 KDC receives certain Kerberos TGS request messages, it may dereference an uninitialized pointer while processing authorization data, causing a crash, or in rare cases, unauthorized information disclosure, ticket modification, or execution of arbitrary code. The crash may be triggered by legitimate requests. This is an implementation vulnerability in MIT krb5, and not a vulnerability in the Kerberos protocol.
-
-
7:08
»
Hack a Day
Researchers at MIT have come up with this slick demo of, what they call, programmable matter. This flat sheet covered in tiny foil actuators can be programmed to fold into specific shapes. Shown in the video above is a boat and an airplane. Using the concepts set down by origami through the years, they can [...]
-
-
17:10
»
SecuriTeam
In MIT krb5 releases krb5-1.7 and later, the SPNEGO GSS-API mechanism can experience an assertion failure when receiving certain invalid messages.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
0:00
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2010-005 - Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library. This is an implementation vulnerability in MIT krb5, and not a vulnerability in the Kerberos protocol.
-
0:00
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2010-005 - Certain invalid GSS-API tokens can cause a GSS-API acceptor (server) to crash due to a null pointer dereference in the GSS-API library. This is an implementation vulnerability in MIT krb5, and not a vulnerability in the Kerberos protocol.
-
-
20:00
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2010-003 - In previous MIT krb5 releases krb5-1.5 through krb5-1.6.3, the Kerberos administration daemon (kadmind) can crash due to referencing freed memory. A legitimate user can trigger this crash by using a newer version of the kadmin protocol than the server supports.
-
20:00
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2010-003 - In previous MIT krb5 releases krb5-1.5 through krb5-1.6.3, the Kerberos administration daemon (kadmind) can crash due to referencing freed memory. A legitimate user can trigger this crash by using a newer version of the kadmin protocol than the server supports.
-
-
18:00
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2010-002 - In MIT krb5 releases krb5-1.7 and later, the SPNEGO GSS-API mechanism can experience an assertion failure when receiving certain invalid messages. This can cause a GSS-API application to crash.
-
18:00
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2010-002 - In MIT krb5 releases krb5-1.7 and later, the SPNEGO GSS-API mechanism can experience an assertion failure when receiving certain invalid messages. This can cause a GSS-API application to crash.
-
-
17:00
»
Packet Storm Security Recent Files
MIT krb5 Security Advisory 2010-001 - Improper input validation in the KDC can cause an assertion failure and process termination. A functional exploit exists, but is not known to be publicly circulated. Releases prior to krb5-1.7 did not contain the vulnerable code. This is an implementation vulnerability in MIT krb5, and is not a vulnerability in the Kerberos protocol.
-
17:00
»
Packet Storm Security Advisories
MIT krb5 Security Advisory 2010-001 - Improper input validation in the KDC can cause an assertion failure and process termination. A functional exploit exists, but is not known to be publicly circulated. Releases prior to krb5-1.7 did not contain the vulnerable code. This is an implementation vulnerability in MIT krb5, and is not a vulnerability in the Kerberos protocol.