Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Gentoo: GLSA-200502-12 Critical: OpenSSL Potential Buffer Underflow Issue

gentoo
Calendar Grey January 5, 2005
Scroller Gentoo
The mit-krb5 package in Gentoo experiences a severe heap overflow vulnerability that could permit arbitrary code execution. Immediate upgrade is strongly advised.
The MIT Kerberos 5 administration library (libkadm5srv) contains a heap overflow that could lead to execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200501-05 https://security.gentoo.org/ Severity: High Title: mit-krb5: Heap overflow in libkadm5srv Date: January 05, 2005 Bugs: #75143 ID: 200501-05

Synopsis ======= The MIT Kerberos 5 administration library (libkadm5srv) contains a heap overflow that could lead to execution of arbitrary code.
Background ========= MIT krb5 is the free implementation of the Kerberos network authentication protocol by the Massachusetts Institute of Technology.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-crypt/mit-krb5 < 1.3.6 >= 1.3.6
========== The MIT Kerberos 5 administration library libkadm5srv contains a heap overflow in the...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution heap overflow mit-krb5

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo arbitrary code execution heap overflow mit-krb5

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround