Package name
krb5
Date
2010-11-02
Advisory ID
MDVSA-2010:202-1
Affected versions
MES5 i586 , MES5 x86_64

Problem description

A vulnerability was discovered and corrected in krb5:

The merge_authdata function in kdc_authdata.c in the Key Distribution
Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does
not properly manage an index into an authorization-data list, which
allows remote attackers to cause a denial of service (daemon crash),
or possibly obtain sensitive information, spoof authorization,
or execute arbitrary code, via a TGS request, as demonstrated by a
request from a Windows Active Directory client (CVE-2010-1322).

The updated packages have been patched to correct this issue.

Update:

Update packages for MES5 were missing with the MDVSA-2010:202
advisory. This advisory provides the update packages.

Updated packages

MES5 i586

 9861393bd5a3d68522009a7aa7f1c464  mes5/i586/krb5-1.8.1-0.2mdvmes5.1.i586.rpm
 322533f773fc193c80a9ada2832a8509  mes5/i586/krb5-pkinit-openssl-1.8.1-0.2mdvmes5.1.i586.rpm
 c136e6a7af35261c85680d711a250d4e  mes5/i586/krb5-server-1.8.1-0.2mdvmes5.1.i586.rpm
 11f482c3e89a3bd604cce91a2a9350d4  mes5/i586/krb5-server-ldap-1.8.1-0.2mdvmes5.1.i586.rpm
 996820e1994bdb9ffc5d2992426e6a28  mes5/i586/krb5-workstation-1.8.1-0.2mdvmes5.1.i586.rpm
 ffd0a9897c5fe0dbf28f026d019566cc  mes5/i586/libkrb53-1.8.1-0.2mdvmes5.1.i586.rpm
 fe92a3a286a954a0b59874384da33159  mes5/i586/libkrb53-devel-1.8.1-0.2mdvmes5.1.i586.rpm 
 c789015f879f629e501fea39dbfe7165  mes5/SRPMS/krb5-1.8.1-0.2mdvmes5.1.src.rpm

MES5 x86_64

 e2ac6d2ae7b216bb1085eedb7a3656b5  mes5/x86_64/krb5-1.8.1-0.2mdvmes5.1.x86_64.rpm
 c6905743e2859e27588c9be83f240ce2  mes5/x86_64/krb5-pkinit-openssl-1.8.1-0.2mdvmes5.1.x86_64.rpm
 5f2ac7007222213cec343f0edfeaef4a  mes5/x86_64/krb5-server-1.8.1-0.2mdvmes5.1.x86_64.rpm
 cdbf46e0ebf1a757d866680ca14300ed  mes5/x86_64/krb5-server-ldap-1.8.1-0.2mdvmes5.1.x86_64.rpm
 d975cc9e3bfc877b89e8a070fb9c9c89  mes5/x86_64/krb5-workstation-1.8.1-0.2mdvmes5.1.x86_64.rpm
 3d501997aa0f61c7c4ecf68a68b37a5a  mes5/x86_64/lib64krb53-1.8.1-0.2mdvmes5.1.x86_64.rpm
 5fb83ceb94d50beb80d41658b2495e34  mes5/x86_64/lib64krb53-devel-1.8.1-0.2mdvmes5.1.x86_64.rpm 
 c789015f879f629e501fea39dbfe7165  mes5/SRPMS/krb5-1.8.1-0.2mdvmes5.1.src.rpm

References