• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MIT Kerberos 'asn1_decode_generaltime()' Uninitialized Pointer Memory Corruption Vulnerability

References:

• Kerberos Homepage (MIT)
  
• MITKRB5-SA-2009-002: ASN.1 decoder frees uninitialized pointer [CVE-2009-0846] (Tom Yu )
  
• VMSA-2009-0008 ESX Service Console update for krb5 (VMware Security Team )
  
• ASA-2009-142 Multiple Security Vulnerabilities in the Solaris Kerberos 'Mech' Li (Avaya)
  
• ASA-2009-162 krb5 security update (RHSA-2009-0409) (Avaya)
  
• ASA-2009-164 - krb5 security update (RHSA-2009-0410) (Avaya)
  
• HPSBUX02421 SSRT090047 (HP)
  
• MITKRB5-SA-2009-002 (MIT)
  
• NKDC 20090409 (Novell)
  
• NKDC 20090409 (Novell)
  
• Solution 256728: Multiple Security Vulnerabilities in the Solaris Kerberos 'Mech (Sun)
  
• swg21396120 IBM NAS (Network Authentication Service) vulnerabilities for DB2 V8. (IBM)
  
• VU#662091 (CERT)