Red Hat Security AdvisoryRHSA-2010:0423
krb5 security update
Released 2010-05-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +6
- Red Hat Enterprise Linux (v. 5 server) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386 +14
- Red Hat Enterprise Linux AS version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +14
- Red Hat Enterprise Linux AS version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +14
- Red Hat Enterprise Linux Desktop (v. 5 client) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386, krb5-libs-1.6.1-36.el5_5.4 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) krb5-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4, krb5-devel-1.6.1-36.el5_5.4.i386 +2
- Red Hat Enterprise Linux Desktop version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +6
- Red Hat Enterprise Linux ES version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +10
- Red Hat Enterprise Linux ES version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +10
- Red Hat Enterprise Linux WS version 3 krb5-1.2.7-72, krb5-devel-1.2.7-72, krb5-devel-1.2.7-72.i386 +10
- Red Hat Enterprise Linux WS version 4 krb5-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2, krb5-devel-1.3.4-62.el4_8.2.i386 +10
Fixes 1 record
Priority MEDIUM 40
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for inva…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.06884 · Published 2010-05-19 · Fixed CWE-476
