Red Hat Security AdvisoryRHSA-2006:0746
mod_auth_kerb security update
Released 2006-12-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 mod_auth_kerb-5.0-1.3, mod_auth_kerb-5.0-1.3.i386, mod_auth_kerb-5.0-1.3.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 mod_auth_kerb-5.0-1.3, mod_auth_kerb-5.0-1.3.i386
- Red Hat Enterprise Linux ES version 4 mod_auth_kerb-5.0-1.3, mod_auth_kerb-5.0-1.3.i386, mod_auth_kerb-5.0-1.3.ia64
- Red Hat Enterprise Linux WS version 4 mod_auth_kerb-5.0-1.3, mod_auth_kerb-5.0-1.3.i386, mod_auth_kerb-5.0-1.3.ia64
Fixes 1 record
Priority LOW 30
Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component ar…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03964 · Published 2006-11-20 · Fixed
