diff options
| author | Tom Yu <tlyu@mit.edu> | 2007-06-26 18:08:20 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2007-06-26 18:08:20 +0000 |
| commit | 581bc90958d2fbda2bb3547e9b854f5c004a430a (patch) | |
| tree | 86c185270b4e5898a99d1f55119cc1e7759244ce /src/lib/gssapi/generic/util_buffer.c | |
| parent | 4264dd0b101f15826f987c65a87ee5aebfdbc3de (diff) | |
| download | krb5-581bc90958d2fbda2bb3547e9b854f5c004a430a.tar.gz krb5-581bc90958d2fbda2bb3547e9b854f5c004a430a.tar.xz krb5-581bc90958d2fbda2bb3547e9b854f5c004a430a.zip | |
fix MITKRB5-SA-2007-004 [CVE-2007-2442/VU#356961, CVE-2007-2443/VU#365313]
CVE-2007-2442/VU#356961: The RPC library can free an uninitialized
pointer. This may lead to execution of arbitrary code.
CVE-2007-2443/VU#365313: The RPC library can write past the end of a
stack buffer. This may (but is unlikely to) lead to execution of
arbitrary code.
ticket: new
target_version: 1.6.2
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19636 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi/generic/util_buffer.c')
0 files changed, 0 insertions, 0 deletions