2 results · Feed
-
Unscored —
Network authentication attack via pam_krb5
pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on …
-
Unscored —
pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental p…