http_negotiate: do not delegate GSSAPI credentials
commitda18694ff7dd0b67dfcb3c417fb0579b1e7d02d7
authorKamil Dudka <kdudka@redhat.com>
Tue, 9 Oct 2012 11:01:56 +0000 (9 13:01 +0200)
committerKalle Olavi Niemitalo <Kalle@Niukka.kon.iki.fi>
Sun, 28 Oct 2012 12:50:58 +0000 (28 14:50 +0200)
treede6c409851d76666a0ae69f3854d292e99bae075
parent89056e21fc7ab8e1c2d4e06ec9d0c6d01e70669a
http_negotiate: do not delegate GSSAPI credentials

CVE-2012-4545.  Reported by Marko Myllynen.
src/protocol/http/http_negotiate.c