Bug 86768 (CVE-2005-1689)

To: cert@cert.org, vendor-sec@lst.de
From: Tom Yu <tlyu@MIT.EDU>
Old-Content-Type: text/plain; charset=us-ascii
Subject: [vendor-sec] confidential - pending security advisory MITKRB5-SA-2005-003
Errors-To: vendor-sec-admin@lst.de
Date: Wed, 01 Jun 2005 15:31:47 -0400

[-- PGP Ausgabe folgt (aktuelle Zeit: Do 02 Jun 2005 11:02:44 CEST) --]
gpg: Unterschrift vom Mi 01 Jun 2005 21:31:50 CEST, DSA SchlÃŒssel ID 2E2F668E
gpg: Unterschrift kann nicht geprÃŒft werden: Ãffentlicher SchlÃŒssel nicht gefunden

[-- Ende der PGP-Ausgabe --]

[-- BEGIN PGP SIGNED MESSAGE --]

The MIT Kerberos Development Team is aware of the following
vulnerability in the MIT krb5 software.  Please do not publicly
disseminate this information prior to our public disclosure.

Our current target date for public disclosure is 12 July 2005.
Vendors should contact tlyu@mit.edu via PGP-encrypted email for
details and patches.  Some vendors already known to the MIT Kerberos
Development Team have been notified previously.  This is a separate
vulnerability from those described in MITKRB5-SA-2005-002.

Please let me know if you have any concerns about the release date.

Advisory MITKRB5-SA-2005-003 concerns the following vulnerability:

CAN-2005-1689: Unauthenticated attacker can cause krb5_recvauth()
function to free a block of memory twice, possibly leading to
arbitrary code execution.

This vulnerability is classified as CRITICAL due to the potential to
compromise a KDC host.

[-- END PGP SIGNED MESSAGE --]
_______________________________________________
Vendor Security mailing list