MIT Kerberos 5 KDC Multiple Memory Corruption Based Information Disclosure Vulnerabilities

Threat level definition

MIT Kerberos 5 KDC Multiple Memory Corruption Based Information Disclosure Vulnerabilities

References:

Kerberos Homepage (MIT)
MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc (raeburn@MIT.EDU )
5022520: novell-kerberos 20080331 (Novell)
5022542: novell-kerberos 20080331 (Novell)
ASA-2008-144 krb5 security update (RHSA-2008-0181) (Avaya)
RHSA-2008:0164-6 Critical: krb5 security and bugfix update (Red Hat)
RHSA-2008:0180-4 Critical: krb5 security update (Red Hat)
RHSA-2008:0181-3 Critical: krb5 security update (Red Hat)
RHSA-2008:0182-3 Security Advisory Critical: krb5 security update (Red Hat)
Vulnerability Note VU#895609 MIT Kerberos krb4-enabled KDC contains multiple vul (US-CERT)

Privacy Statement
Copyright 2007, SecurityFocus