MDVSA-2011:077 -- Mandriva krb5ID: oval:org.secpod.oval:def:301002 | Date: (C)2012-01-07 (M)2021-09-11 |
Class: PATCH | Family: unix |
A vulnerability has been found and corrected in krb5: The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request that triggers an error condition . The updated packages have been patched to correct this issue.
Platform: |
Mandriva Linux 2010.1 |