Red Hat Security AdvisoryRHSA-2007:0858
krb5 security update
Released 2007-09-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) krb5-1.5-29, krb5-devel-1.5-29, krb5-devel-1.5-29.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.5-29, krb5-libs-1.5-29, krb5-libs-1.5-29.i386 +2
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.5-29, krb5-devel-1.5-29, krb5-devel-1.5-29.i386 +2
Fixes 2 records
Priority MEDIUM 56
Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration d…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10909 · Published 2007-09-05 · Fixed CWE-119
Priority MEDIUM 46
The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy doe…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.06139 · Published 2007-09-05 · Fixed CWE-824
