Technical Description

Two vulnerabilities have been identified in MIT Kerberos, which could be exploited by remote attackers to take complete control of an affected system or cause a denial of service [...]

Solution

Upgrade to MIT Kerberos V5 version 1.6 :
http://web.mit.edu/kerberos/krb5-1.6/

Or apply patches :
http://web.mit.edu/kerberos/advisories/2006-003-patch.txt
http://web.mit.edu/kerberos/advisories/2006-002-patch.txt

Credits

Vulnerabilities reported by Andrew Korty (Indiana University)

ChangeLog

2007-01-09 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.