MIT Kerberos Multiple Memory Corruption Vulnerabilities

MIT Kerberos Multiple Memory Corruption Vulnerabilities

References:

app-crypt/mit-krb5 multiple issues (CVE-2007-{5901,5902, 5971, 5972, 5894}) (Gentoo bugzilla)
Bugzilla Bug 199211 mit-krb5 library double-free vulnerability (Gentoo Bugzilla)
Bugzilla Bug 199212 mit-krb5 lib vulnerability (Gentoo Bugzilla)
Bugzilla Bug 199214 mit-krb5 lib vulnerability (Gentoo Bugzilla)
Kerberos Homepage (MIT)
Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 C (Tom Yu)
RHSA-2008:0164-6 Critical: krb5 security and bugfix update (Red Hat)
RHSA-2008:0180-4 Critical: krb5 security update (Red Hat)

Privacy Statement
Copyright 2010, SecurityFocus