Unscored DSA-1766-1 4 CVEs

krb5 - several vulnerabilities

Published Apr 9, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	krb5	1.4.4-7etch7
Debian · 5.0	krb5	1.6.dfsg.4~beta1-5lenny1

Vulnerabilities 4

Unscored —

CVE-2009-0844

The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote …

krb5 Debian

Apr 9, 2009
Unscored —

CVE-2009-0845

The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through …

krb5 Debian

Mar 27, 2009
Unscored —

CVE-2009-0846

The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerber…

krb5 Debian

Apr 9, 2009
Unscored —

CVE-2009-0847

The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote…

krb5 Debian

Apr 9, 2009