krb5: arbitrary code execution
| Package(s): | krb5 | CVE #(s): | CVE-2010-1320 | ||||||||||||||||||||
| Created: | April 22, 2010 | Updated: | July 21, 2010 | ||||||||||||||||||||
| Description: | From the Red Hat bugzilla entry: A double-free vulnerability was found in the KDC in MIT krb5 versions 1.7 and later. This flaw could allow an authenticated remote attacker to crash the KDC by inducing the KDC to perform a double-free, or to possibly allow for the execution of arbitrary code (although the latter is believed to be difficult). | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||