Red Hat Security Advisory

RHSA-2007:0384

krb5 security update

Released 2007-06-26 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Desktop version 3 krb5-1.2.7-66, krb5-devel-1.2.7-66, krb5-devel-1.2.7-66.i386 +6
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 krb5-1.2.2-47, krb5-devel-1.2.2-47.i386, krb5-devel-1.2.2-47.ia64 +6
Red Hat Enterprise Linux AS version 3 krb5-1.2.7-66, krb5-devel-1.2.7-66, krb5-devel-1.2.7-66.i386 +14
Red Hat Enterprise Linux ES version 2.1 krb5-1.2.2-47, krb5-devel-1.2.2-47.i386, krb5-libs-1.2.2-47.i386 +2
Red Hat Enterprise Linux ES version 3 krb5-1.2.7-66, krb5-devel-1.2.7-66, krb5-devel-1.2.7-66.i386 +10
Red Hat Enterprise Linux WS version 2.1 krb5-1.2.2-47, krb5-devel-1.2.2-47.i386, krb5-libs-1.2.2-47.i386 +2
Red Hat Enterprise Linux WS version 3 krb5-1.2.7-66, krb5-devel-1.2.7-66, krb5-devel-1.2.7-66.i386 +10
Red Hat Linux Advanced Workstation 2.1 krb5-1.2.2-47, krb5-devel-1.2.2-47.ia64, krb5-libs-1.2.2-47.ia64 +2

Fixes 3 records

TI-2007-02358 CVE-2007-2442 · GHSA-6hfh-4j58-7r89

The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and…

MEDIUM 56

The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11376 Published 2007-06-26 Fixed CWE-824

TI-2007-02708 CVE-2007-2798 · GHSA-hfq9-977x-jj82

Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT…

MEDIUM 49

Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.07519 Published 2007-06-26 Fixed CWE-787

TI-2007-02359 CVE-2007-2443 · GHSA-59m5-fjcv-54hx

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the…

MEDIUM 42

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.03479 Published 2007-06-26 Fixed