Red Hat Security AdvisoryRHSA-2010:0863
krb5 security update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) krb5-1.8.2-3.el6_0.1, krb5-libs-1.8.2-3.el6_0.1, krb5-pkinit-openssl-1.8.2-3.el6_0.1 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) krb5-1.8.2-3.el6_0.1, krb5-devel-1.8.2-3.el6_0.1, krb5-server-1.8.2-3.el6_0.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) krb5-1.8.2-3.el6_0.1, krb5-libs-1.8.2-3.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) krb5-1.8.2-3.el6_0.1, krb5-devel-1.8.2-3.el6_0.1, krb5-pkinit-openssl-1.8.2-3.el6_0.1 +3
- Red Hat Enterprise Linux Server (v. 6) krb5-1.8.2-3.el6_0.1, krb5-devel-1.8.2-3.el6_0.1, krb5-devel-1.8.2-3.el6_0.1.ppc +7
- Red Hat Enterprise Linux Workstation (v. 6) krb5-1.8.2-3.el6_0.1, krb5-devel-1.8.2-3.el6_0.1, krb5-libs-1.8.2-3.el6_0.1 +4
Fixes 1 record
Priority LOW 34
The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remote at…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0304 · Published 2010-10-07 · Fixed CWE-20
