Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-ppc-dev
Navigation:
Lists: gentoo-ppc-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: Daniel Ahlberg <aliz@g.o>
Subject: GLSA: krb5
Date: Fri Aug 2 16:26:14 2002
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT
- - --------------------------------------------------------------------

PACKAGE        :krb5
SUMMARY        :remote root access
DATE           :2002-08-02 20:39 UTC

- - --------------------------------------------------------------------

OVERVIEW

A integer overflow could be exploited to gain root access
to a KDC host.

DETAIL

There is an integer overflow bug in the SUNRPC-derived RPC library
used by the Kerberos 5 administration system that could be exploited
to gain unauthorized root access to a KDC host.  It is believed that
the attacker needs to be able to authenticate to the kadmin daemon for
this attack to be successful.  No exploits are known to exist yet.

The full advisory may be found here:
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-001-xdr.txt

SOLUTION

It is recommended that all Gentoo Linux users update their systems as
follows.

emerge rsync
emerge krb5
emerge clean

- - --------------------------------------------------------------------
Daniel Ahlberg
aliz@g.o
- - --------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9SvjQfT7nyhUpoZMRAr6QAKCMgqwCW98LFFnNeGxIrkMPGESSwwCdHQsw
3rH7Hrva63G+2ulhV6pC30M=
=m36V
-----END PGP SIGNATURE-----


Navigation:
Lists: gentoo-ppc-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
GLSA: mpack
Next by thread:
GLSA: OpenAFS
Previous by date:
GLSA: mpack
Next by date:
GLSA: OpenAFS


Updated Jun 17, 2009

Summary: Archive of the gentoo-ppc-dev mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.