|
MIT Kerberos 5 KRB5_AName_To_Localname Multiple Principal Name Buffer Overrun Vulnerabilities
Kerberos 5 is prone to multiple boundary condition errors that exist in the krb5_aname_to_localname() and helper functions and are due to insufficient bounds checking performed on user-supplied data. An additional boundary condition issue also exists in the krb5_aname_to_localname() function. The condition is reported to present itself in the explicit mapping functionality of the krb5_aname_to_localname() as an off-by-one. These conditions may be theoretically exploitable to execute arbitrary code remotely in the context of the affected service. It is reported that explicit mapping or rules-based mapping functionality of krb5_aname_to_localname() must be enabled for these vulnerabilities to be present. Additionally it is necessary that the principal name used by the attacker to exploit the issue be listed in the explicit mapping list. These vulnerabilities are reported to affect all releases of MIT Kerberos 5, up to and including version krb5-1.3.3. |
|
|
Privacy Statement |
