Package name
krb5
Date
2004-06-09
Advisory ID
MDKSA-2004:056-1
Affected versions
9.2 amd64 , CS2.1 x86_64 , 10.0 amd64 , CS2.1 i586 , 10.0 i586 , 9.2 i586 , 9.1 i586 , MNF8.2 i586 , 9.1 i586

Problem description

Multiple buffer overflows exist in the krb5_aname_to_localname() library function that if exploited could lead to unauthorized root privileges. In order to exploit this flaw, an attacker must first successfully authenticate to a vulnerable service, which must be configured to enable the explicit mapping or rules-based mapping functionality of krb5_aname_to_localname, which is not a default configuration. Mandrakesoft encourages all users to upgrade to these patched krb5 packages. Update: The original patch provided contained a bug where rule-based entries on systems without HAVE_REGCOMP would not work. These updated packages provide the second patch provided by Kerberos development team which fixes that behaviour.

Updated packages

9.2 amd64

 caccd7cf30c0741fbc97be20eb0dc05a  amd64/9.2/RPMS/ftp-client-krb5-1.3-3.2.92mdk.amd64.rpm
266304d9a8ef682bd923f5f4789d7193  amd64/9.2/RPMS/ftp-server-krb5-1.3-3.2.92mdk.amd64.rpm
b4610e330c05d44c7c983ba142c77c22  amd64/9.2/RPMS/krb5-server-1.3-3.2.92mdk.amd64.rpm
0bef84b3a99bea0bdc52c706a296302d  amd64/9.2/RPMS/krb5-workstation-1.3-3.2.92mdk.amd64.rpm
d396c5ecd4f7833ee7166e0b21d427dd  amd64/9.2/RPMS/lib64krb51-1.3-3.2.92mdk.amd64.rpm
7c71f2e0bf4eede67d9ac4dfb37b6b68  amd64/9.2/RPMS/lib64krb51-devel-1.3-3.2.92mdk.amd64.rpm
066bbaaccae6f53a673b34a98c61bc90  amd64/9.2/RPMS/telnet-client-krb5-1.3-3.2.92mdk.amd64.rpm
dce9c58384b1ff86ede26f5988cfeee6  amd64/9.2/RPMS/telnet-server-krb5-1.3-3.2.92mdk.amd64.rpm
15ce0a65e3b4d332af84939cf0c85070  amd64/9.2/SRPMS/krb5-1.3-3.2.92mdk.src.rpm

CS2.1 x86_64

 de1460b4ce2c0200016f83dc32318c66  x86_64/corporate/2.1/RPMS/ftp-client-krb5-1.2.5-1.6.C21mdk.x86_64.rpm
a54663cb122512c71e958b36c0101f6f  x86_64/corporate/2.1/RPMS/ftp-server-krb5-1.2.5-1.6.C21mdk.x86_64.rpm
d6ae2f8f95fe40b28cb29386028ce691  x86_64/corporate/2.1/RPMS/krb5-devel-1.2.5-1.6.C21mdk.x86_64.rpm
5b49725cc0937a61696d4209553c63b6  x86_64/corporate/2.1/RPMS/krb5-libs-1.2.5-1.6.C21mdk.x86_64.rpm
30becf5eba2ee0ad4d90a4511afa7bfa  x86_64/corporate/2.1/RPMS/krb5-server-1.2.5-1.6.C21mdk.x86_64.rpm
0f1d037b91fafa087e1d83d6c7c4b06c  x86_64/corporate/2.1/RPMS/krb5-workstation-1.2.5-1.6.C21mdk.x86_64.rpm
650fed145e95b8cbd98458594cc6c644  x86_64/corporate/2.1/RPMS/telnet-client-krb5-1.2.5-1.6.C21mdk.x86_64.rpm
64da12317074b00acc9d56dce1daedf3  x86_64/corporate/2.1/RPMS/telnet-server-krb5-1.2.5-1.6.C21mdk.x86_64.rpm
3de7ac3dbb7051d43a768c7279fc5ff6  x86_64/corporate/2.1/SRPMS/krb5-1.2.5-1.6.C21mdk.src.rpm

10.0 amd64

 25fdf1ec42187aabc637a49d751440f3  amd64/10.0/RPMS/ftp-client-krb5-1.3-6.2.100mdk.amd64.rpm
7a325f9779a50902c8825b15e61432d9  amd64/10.0/RPMS/ftp-server-krb5-1.3-6.2.100mdk.amd64.rpm
53c131a11babc4095a17852b6a832716  amd64/10.0/RPMS/krb5-server-1.3-6.2.100mdk.amd64.rpm
b20b5bbc158c08ce8f42788f912f846e  amd64/10.0/RPMS/krb5-workstation-1.3-6.2.100mdk.amd64.rpm
437603db5166ae14f1bc368cdf64c1f8  amd64/10.0/RPMS/lib64krb51-1.3-6.2.100mdk.amd64.rpm
1f5f4c00b69e785c2d7660a0f16787d7  amd64/10.0/RPMS/lib64krb51-devel-1.3-6.2.100mdk.amd64.rpm
9654ca0f0e1718702daf4bbe7ac1f8b0  amd64/10.0/RPMS/telnet-client-krb5-1.3-6.2.100mdk.amd64.rpm
ce1aa30d1a56a44312e8889c5328070a  amd64/10.0/RPMS/telnet-server-krb5-1.3-6.2.100mdk.amd64.rpm
69534bf0994a5deb8de8af7e6a8db9bd  amd64/10.0/SRPMS/krb5-1.3-6.2.100mdk.src.rpm

CS2.1 i586

 46c7983a619cc841f08002dc8e7168e5  corporate/2.1/RPMS/ftp-client-krb5-1.2.5-1.6.C21mdk.i586.rpm
5a33a852581bf1513b03e9963e9fb5f1  corporate/2.1/RPMS/ftp-server-krb5-1.2.5-1.6.C21mdk.i586.rpm
5db4ce83f34d89c88dee363f7456a579  corporate/2.1/RPMS/krb5-devel-1.2.5-1.6.C21mdk.i586.rpm
c973ac1b9a8faf0cc50ab1caaa368650  corporate/2.1/RPMS/krb5-libs-1.2.5-1.6.C21mdk.i586.rpm
21c88ad82c4c4dcd8273d7be8bdb233c  corporate/2.1/RPMS/krb5-server-1.2.5-1.6.C21mdk.i586.rpm
be8cf199fd6bcd2a77e134db855cabd8  corporate/2.1/RPMS/krb5-workstation-1.2.5-1.6.C21mdk.i586.rpm
24e5b09f2539366f3b2263c488c08747  corporate/2.1/RPMS/telnet-client-krb5-1.2.5-1.6.C21mdk.i586.rpm
ba20a57f8ab221b6923d8614990ea632  corporate/2.1/RPMS/telnet-server-krb5-1.2.5-1.6.C21mdk.i586.rpm
3de7ac3dbb7051d43a768c7279fc5ff6  corporate/2.1/SRPMS/krb5-1.2.5-1.6.C21mdk.src.rpm

10.0 i586

 f99046b9c22ccd8ee43c55e81455c2da  10.0/RPMS/ftp-client-krb5-1.3-6.2.100mdk.i586.rpm
71ec023bc253a7a644bf769912581581  10.0/RPMS/ftp-server-krb5-1.3-6.2.100mdk.i586.rpm
83bc4f8083c696cd886d17c85367da4d  10.0/RPMS/krb5-server-1.3-6.2.100mdk.i586.rpm
1452a4348bce8d7fbc233041e23976f1  10.0/RPMS/krb5-workstation-1.3-6.2.100mdk.i586.rpm
adc2470941f1fa52f510ea72905de4a6  10.0/RPMS/libkrb51-1.3-6.2.100mdk.i586.rpm
b03971c30f024e337097fcf88fcac4ba  10.0/RPMS/libkrb51-devel-1.3-6.2.100mdk.i586.rpm
e106dd67e9d3a2189558ad020fa74c8e  10.0/RPMS/telnet-client-krb5-1.3-6.2.100mdk.i586.rpm
916930bef00993dea584b02a7467df01  10.0/RPMS/telnet-server-krb5-1.3-6.2.100mdk.i586.rpm
69534bf0994a5deb8de8af7e6a8db9bd  10.0/SRPMS/krb5-1.3-6.2.100mdk.src.rpm

9.2 i586

 d08f22afc32e753ef0bc90cf604dfdb1  9.2/RPMS/ftp-client-krb5-1.3-3.2.92mdk.i586.rpm
dc25f20e192c32d3daea4a4f874acb98  9.2/RPMS/ftp-server-krb5-1.3-3.2.92mdk.i586.rpm
d4561ab2567e7df1f5f1a586a81e8872  9.2/RPMS/krb5-server-1.3-3.2.92mdk.i586.rpm
0083e0ffa5fe9a9a17c4780fbc026eca  9.2/RPMS/krb5-workstation-1.3-3.2.92mdk.i586.rpm
b907f745f2f1115290b754dbe503bd3a  9.2/RPMS/libkrb51-1.3-3.2.92mdk.i586.rpm
09053a957460e7e925b479afaef5e545  9.2/RPMS/libkrb51-devel-1.3-3.2.92mdk.i586.rpm
b899e55b0ba58b04a1183dcc1d2f0647  9.2/RPMS/telnet-client-krb5-1.3-3.2.92mdk.i586.rpm
faad683f3bb93d5f41539638046b6f1c  9.2/RPMS/telnet-server-krb5-1.3-3.2.92mdk.i586.rpm
15ce0a65e3b4d332af84939cf0c85070  9.2/SRPMS/krb5-1.3-3.2.92mdk.src.rpm

9.1 i586

 441f4e7100c5b3f8be81726e53fdf222  9.1/RPMS/ftp-client-krb5-1.2.7-1.3.91mdk.i586.rpm
d051877320e0ab9c400d466eff9559ba  9.1/RPMS/ftp-server-krb5-1.2.7-1.3.91mdk.i586.rpm
b32f0cb98b47efd2fb1b04cd130c0854  9.1/RPMS/krb5-devel-1.2.7-1.3.91mdk.i586.rpm
a2b8deb8fc93b8369ca222a5907478af  9.1/RPMS/krb5-libs-1.2.7-1.3.91mdk.i586.rpm
c26e07825b09f802d614a22a6faa860f  9.1/RPMS/krb5-server-1.2.7-1.3.91mdk.i586.rpm
747567def9fe60a96cfd2b2f5be1b1ac  9.1/RPMS/krb5-workstation-1.2.7-1.3.91mdk.i586.rpm
d0e55eaa93da890ef440b191dee71943  9.1/RPMS/telnet-client-krb5-1.2.7-1.3.91mdk.i586.rpm
5731acac4bd16d820d7916dd32a5d4d8  9.1/RPMS/telnet-server-krb5-1.2.7-1.3.91mdk.i586.rpm
9539ee89b7f88a2f845e8414152bb7ca  9.1/SRPMS/krb5-1.2.7-1.3.91mdk.src.rpm

MNF8.2 i586

 36edbd4e81a9588b97370ad7d1b85cc3  mnf8.2/RPMS/krb5-libs-1.2.2-17.7.M82mdk.i586.rpm
8954be36c82d2bd6066cb9ab451d9a32  mnf8.2/SRPMS/krb5-1.2.2-17.7.M82mdk.src.rpm

9.1 i586

 b934cdf4bf7c35c56c2535ca22cae8e2  ppc/9.1/RPMS/ftp-client-krb5-1.2.7-1.3.91mdk.ppc.rpm
6938f2f92ad903475162c90256108e11  ppc/9.1/RPMS/ftp-server-krb5-1.2.7-1.3.91mdk.ppc.rpm
744b5d2b55426119118a8809112bfee9  ppc/9.1/RPMS/krb5-devel-1.2.7-1.3.91mdk.ppc.rpm
5f133f52ae1ed12cbf2535572e532763  ppc/9.1/RPMS/krb5-libs-1.2.7-1.3.91mdk.ppc.rpm
1cdab319a93b6b2ccab9a8f4f68ac759  ppc/9.1/RPMS/krb5-server-1.2.7-1.3.91mdk.ppc.rpm
f67d0f0226f79aa18129184e5c5475b4  ppc/9.1/RPMS/krb5-workstation-1.2.7-1.3.91mdk.ppc.rpm
92a1aec78b8b3986eff4d51cc32885d5  ppc/9.1/RPMS/telnet-client-krb5-1.2.7-1.3.91mdk.ppc.rpm
c19ce680a739c47e8b46b0da70682470  ppc/9.1/RPMS/telnet-server-krb5-1.2.7-1.3.91mdk.ppc.rpm
9539ee89b7f88a2f845e8414152bb7ca  ppc/9.1/SRPMS/krb5-1.2.7-1.3.91mdk.src.rpm

References