| commit | c7225ae57f2e9f5c8a51f8afb5c5e1b6038ad263 | |
| author | Love Hornquist Astrand <lha@h5l.org> | |
| Wed, 26 May 2010 16:53:31 +0000 (26 11:53 -0500) | ||
| committer | Love Hornquist Astrand <lha@h5l.org> | |
| Wed, 26 May 2010 16:57:09 +0000 (26 11:57 -0500) | ||
| tree | 348e42401e792afaba6df630d1f23a24d9f63046 | treesnapshot (tar.gz zip) |
| parent | 987c45a11f0fe66c92758fc1db8876d8c4018260 | commitdiff |
Check the GSS-API checksum exists before trying to use it [CVE-2010-1321]
This was introduced by checking the Kerberos 5 checksum as a
alternative to the 8003 checksum.
Thanks to MIT Kerberos and Shawn Emery for forwarding this issue
This was introduced by checking the Kerberos 5 checksum as a
alternative to the 8003 checksum.
Thanks to MIT Kerberos and Shawn Emery for forwarding this issue
| lib/gssapi/krb5/8003.c | diffblobblamehistory | |
| lib/gssapi/krb5/accept_sec_context.c | diffblobblamehistory |