apple/ccs-pykerberos

Releases5

Frequency3 years 4 months

Last Release over 5 years ago

Stars118

Python Kerberos library used by CalendarServer

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2015-3206 ↗	Aug 25, 2017Friday, 25 August 2017, 18:29	—	6.8 MEDIUM
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.