CVE-2018-20217
Security Bulletins
Latest Malware Updates
CVE-2018-20217
A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
References:
Security Advisories Database
A remote attacker can execute arbitrary code on the target system.
07/21/2015
SQL inection vulnerability has been discovered in Piwigo.
02/05/2015
A cross-site scripting (XSS) vulnerability has been discovered in DotNetNuke.
02/05/2015
A cross-site scripting vulnerability was found in Hitachi Command Suite.
02/02/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/30/2015
An attacker can perform a denial of service attack.
01/29/2015
An attacker can perform a denial of service attack.
01/20/2015
