Red Hat Security AdvisoryRHSA-2007:0562
krb5 security update
Released 2007-06-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.5-26, krb5-devel-1.5-26, krb5-devel-1.5-26.i386 +14
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-49, krb5-devel-1.3.4-49, krb5-devel-1.3.4-49.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.5-26, krb5-libs-1.5-26, krb5-libs-1.5-26.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.5-26, krb5-devel-1.5-26, krb5-devel-1.5-26.i386 +2
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-49, krb5-devel-1.3.4-49, krb5-devel-1.3.4-49.i386 +6
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-49, krb5-devel-1.3.4-49, krb5-devel-1.3.4-49.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-49, krb5-devel-1.3.4-49, krb5-devel-1.3.4-49.i386 +10
Fixes 3 records
Priority MEDIUM 56
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.11376 · Published 2007-06-26 · Fixed CWE-824
Priority MEDIUM 49
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.07519 · Published 2007-06-26 · Fixed CWE-787
Priority MEDIUM 42
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.03479 · Published 2007-06-26 · Fixed
THREATIST.IORead the docs