OSVDB ID: 44748

Title: MIT Kerberos 5 (krb5) lib/rpc/svc_auth_gss.c svcauth_gss_get_principal Function RPC Request GSS Client Name Overflow

Info

Disclosure

Dec 08, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2007-5902 (see also: NVD)
Bugtraq ID: 26750
Secunia Advisory ID: 28636 29457 39290 39784
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=199214
http://wiki.rpath.com/Advisories:rPSA-2008-0112
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112
https://issues.rpath.com/browse/RPL-2012
Mail List Post: http://seclists.org/fulldisclosure/2007/Dec/0176.html
http://seclists.org/fulldisclosure/2007/Dec/0321.html
Other Advisory URL: http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
Vendor Specific Advisory URL: http://www.ubuntu.com/usn/USN-924-1
http://www.ubuntu.com/usn/USN-940-1

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/44748