Gentoo: GLSA 200701-14 Normal: Mod_auth_kerb Buffer Overflow Risk

Gentoo Linux Security Advisory GLSA 200701-14 https://security.gentoo.org/ Severity: Normal Title: Mod_auth_kerb: Denial of Service Date: January 22, 2007 Bugs: #155782 ID: 200701-14

Synopsis ======= Mod_auth_kerb is vulnerable to a buffer overflow possibly allowing a Denial of Service.
Background ========= Mod_auth_kerb is an Apache authentication module using Kerberos.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-www/mod_auth_kerb < 5.0_rc7-r1 >= 5.0_rc7-r1
========== Mod_auth_kerb improperly handles component byte encoding in the der_get_oid() function, allowing for a buffer overflow to occur if there are no components which require more than one byte for en...