Gentoo Linux Security Advisory GLSA 200404-09
https://security.gentoo.org/
Severity: Normal
Title: Cross-realm trust vulnerability in Heimdal
Date: April 09, 2004
Bugs: #46590
ID: 200404-09
Synopsis
=======
Heimdal contains cross-realm vulnerability allowing someone with
control over a realm to impersonate anyone in the cross-realm trust
path.
Background
=========
Heimdal is a free implementation of Kerberos 5.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
app-crypt/heimdal <= 0.6.0 >= 0.6.1
==========
Heimdal does not properly perform certain consistency checks for
cross-realm requests, which allows remote attackers with control of a
realm to impersonate others in the cross-realm trus...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.