Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams discovered that Heimdal clients incorrectly trusted unauthenticated portions of Kerberos tickets. A remote attacker could use this to impersonate trusted network services or perform other attacks.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-clients" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-clients-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-clients-x" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-clients-x-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-dbg" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-dev" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-dev-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-docs" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-kcm" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-kcm-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-kdc" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-kdc-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-multidev" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-multidev-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-servers" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-servers-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-servers-x" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "heimdal-servers-x-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libasn1-8-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libasn1-8-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libgssapi3-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libgssapi3-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhcrypto4-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhcrypto4-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhdb9-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhdb9-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libheimbase1-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libheimbase1-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libheimntlm0-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libheimntlm0-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhx509-5-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libhx509-5-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkadm5clnt7-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkadm5clnt7-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkadm5srv8-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkadm5srv8-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkafs0-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkafs0-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkdc2-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkdc2-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkrb5-26-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libkrb5-26-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libotp0-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libotp0-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libroken18-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libroken18-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libsl0-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libsl0-heimdal-dbgsym" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libwind0-heimdal" }, { "binary_version": "1.6~git20131207+dfsg-1ubuntu1.2", "binary_name": "libwind0-heimdal-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-clients" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-clients-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-dbg" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-dev" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-dev-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-docs" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-kcm" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-kcm-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-kdc" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-kdc-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-multidev" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-multidev-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-servers" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "heimdal-servers-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libasn1-8-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libasn1-8-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libgssapi3-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libgssapi3-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhcrypto4-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhcrypto4-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhdb9-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhdb9-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libheimbase1-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libheimbase1-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libheimntlm0-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libheimntlm0-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhx509-5-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libhx509-5-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkadm5clnt7-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkadm5clnt7-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkadm5srv8-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkadm5srv8-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkafs0-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkafs0-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkdc2-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkdc2-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkrb5-26-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libkrb5-26-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libotp0-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libotp0-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libroken18-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libroken18-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libsl0-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libsl0-heimdal-dbgsym" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libwind0-heimdal" }, { "binary_version": "1.7~git20150920+dfsg-4ubuntu1.16.04.1", "binary_name": "libwind0-heimdal-dbgsym" } ] }