MIT Kerberos 'NegTokenInit' Token Handling Remote Denial Of Service Vulnerability

MIT Kerberos 'NegTokenInit' Token Handling Remote Denial Of Service Vulnerability

References:

Kerberos Homepage (MIT)
krb5:/trunk/src/lib/gssapi/spnego/spnego_mech.c (MIT)
RT/krbdev.mit.edu: Ticket #6402 CVE-2009-0845 SPNEGO can dereference a null poin (MIT)
ASA-2009-142 Multiple Security Vulnerabilities in the Solaris Kerberos 'Mech' Li (Avaya)
HPSBUX02421 SSRT090047 (HP)
NKDC 20090409 (Novell)
NKDC 20090409 (Novell)
Solution 256728: Multiple Security Vulnerabilities in the Solaris Kerberos 'Mech (Sun)

Privacy Statement
Copyright 2010, SecurityFocus