| <?xml version="1.0" encoding="utf-8"?> |
| <?xml-stylesheet href="/xsl/glsa.xsl" type="text/xsl"?> |
| <?xml-stylesheet href="/xsl/guide.xsl" type="text/xsl"?> |
| <!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd"> |
| |
| <glsa id="200701-21"> |
| <title>MIT Kerberos 5: Arbitrary Remote Code Execution</title> |
| <synopsis> |
| Multiple vulnerabilities in MIT Kerberos 5 could potentially result in the |
| execution of arbitrary code. |
| </synopsis> |
| <product type="ebuild">mit-krb5</product> |
| <announced>January 24, 2007</announced> |
| <revised>January 24, 2007: 01</revised> |
| <bug>158810</bug> |
| <access>remote</access> |
| <affected> |
| <package name="app-crypt/mit-krb5" auto="yes" arch="*"> |
| <unaffected range="ge">1.5.2</unaffected> |
| <vulnerable range="lt">1.5.2</vulnerable> |
| </package> |
| </affected> |
| <background> |
| <p> |
| MIT Kerberos 5 is a suite of applications that implement the Kerberos |
| network protocol. |
| </p> |
| </background> |
| <description> |
| <p> |
| The Kerberos administration daemon, and possibly other applications |
| using the GSS-API or RPC libraries, could potentially call a function |
| pointer in a freed heap buffer, or attempt to free an uninitialized |
| pointer. |
| </p> |
| </description> |
| <impact type="high"> |
| <p> |
| A remote attacker may be able to crash an affected application, or |
| potentially execute arbitrary code with root privileges. |
| </p> |
| </impact> |
| <workaround> |
| <p> |
| There is no known workaround at this time. |
| </p> |
| </workaround> |
| <resolution> |
| <p> |
| All MIT Kerberos 5 users should upgrade to the latest version: |
| </p> |
| <code> |
| # emerge --sync |
| # emerge --ask --oneshot --verbose ">=app-crypt/mit-krb5-1.5.2"</code> |
| </resolution> |
| <references> |
| <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6143">CVE-2006-6143</uri> |
| <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6144">CVE-2006-6144</uri> |
| </references> |
| <metadata tag="requester" timestamp="Fri, 12 Jan 2007 22:46:59 +0000"> |
| falco |
| </metadata> |
| <metadata tag="submitter" timestamp="Sun, 14 Jan 2007 23:13:19 +0000"> |
| taviso |
| </metadata> |
| <metadata tag="bugReady" timestamp="Mon, 22 Jan 2007 12:38:46 +0000"> |
| falco |
| </metadata> |
| </glsa> |