Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200409-09 High Severity: MIT krb5 Code Execution Risks

gentoo
Calendar Grey September 6, 2004
Scroller Gentoo
Serious vulnerabilities detected in MIT krb5 for Gentoo users; immediate updates required to avert potential threats. Take action now!
MIT krb5 contains several double-free vulnerabilities, potentially allowing the execution of arbitrary code, as well as a denial of service vulnerability

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200409-09
                                            https://security.gentoo.org/

  Severity: High
     Title: MIT krb5: Multiple vulnerabilities
      Date: September 06, 2004
      Bugs: #62417
        ID: 200409-09


Synopsis
=======
MIT krb5 contains several double-free vulnerabilities, potentially
allowing the execution of arbitrary code, as well as a denial of
service vulnerability.

Background
=========
MIT krb5 is the free implementation of the Kerberos network
authentication protocol by the Massachusetts Institute of Technology.

Affected packages
================
    -------------------------------------------------------------------
     Package             /  Vulnerable  /                   Unaffected
    -------------------------------------------------------------------
  1  app-crypt/mit-krb5       < 1.3.4                         >= 1.3.4

==========
The implementat...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo arbitrary code execution

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service high severity gentoo arbitrary code execution

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround