[prev in list] [next in list] [prev in thread] [next in thread]
List: krb5-cvs
Subject: svn rev #20289: branches/krb5-1-5/ src/lib/rpc/
From: tlyu () mit ! edu
Date: 2008-03-25 3:16:32
Message-ID: 200803250316.XAA20314 () drugstore ! mit ! edu
[Download RAW message or body]
Commit By: tlyu
Log Message:
ticket: new
target_version: 1.5.4
tags: pullup
subject: (1.5.x) fix MITKRB5-SA-2007-006 svc_auth_gss.c buffer overflow [CVE-2007-3999, CVE-2007-4743]
component: krb5-libs
r19913@cathode-dark-space: tlyu | 2007-09-04 14:52:56 -0400
ticket: new
subject: fix CVE-2007-3999 svc_auth_gss.c buffer overflow
target_version: 1.6.3
tags: pullup
component: krb5-libs
Make sure svcauth_gss_validate adequately checks oa->oa_length prior
to copying into rpcbuf.
Changed Files:
_U branches/krb5-1-5/
U branches/krb5-1-5/src/lib/rpc/svc_auth_gss.c
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic