MIT Kerberos5 kadmind Excessive File Descriptors Multiple Remote Code Execution Vulnerabilities

MIT Kerberos5 kadmind Excessive File Descriptors Multiple Remote Code Execution Vulnerabilities

References:

Kerberos Homepage (MIT)
MITKRB5-SA-2008-002: array overrun in RPC library used by kadmind (raeburn@MIT.EDU)
5022520: novell-kerberos 20080331 (Novell)
5022542: novell-kerberos 20080331 (Novell)
ASA-2008-144 krb5 security update (RHSA-2008-0181) (Avaya)
RHSA-2008:0164-6 Critical: krb5 security and bugfix update (Red Hat)
RHSA-2008:0181-3 Critical: krb5 security update (Red Hat)
VU#374121 MIT Kerberos contains array overrun in RPC library used by kadmind (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus