Return-Path: Received: from dmz-mailsec-scanner-5.mit.edu (DMZ-MAILSEC-SCANNER-5.MIT.EDU [18.7.68.34]) by krbdev.mit.edu (Postfix) with ESMTP id 570A73E6EC for ; Tue, 12 Jan 2010 18:11:44 -0500 (EST) X-Auditid: 12074422-b7b85ae000000733-9f-4b4d01b04b84 Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by dmz-mailsec-scanner-5.mit.edu (Symantec Brightmail Gateway) with SMTP id D1.A6.01843.0B10D4B4; Tue, 12 Jan 2010 18:11:44 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id o0CNB0v4002771 for ; Tue, 12 Jan 2010 18:11:00 -0500 (EST) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id o0CNBvsJ019869 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 12 Jan 2010 18:11:57 -0500 (EST) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id o0CNBX80018144; Tue, 12 Jan 2010 18:11:33 -0500 (EST) To: rt@krbdev.MIT.EDU Subject: Re: [krbdev.mit.edu #6636] Segfault with unused pkinit References: From: Tom Yu Date: Tue, 12 Jan 2010 18:11:33 -0500 In-Reply-To: (Chris via's message of "Tue, 12 Jan 2010 11:34:35 -0500 (EST)") Message-ID: Lines: 5 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Scanned-BY: MIMEDefang 2.42 X-Brightmail-Tracker: AAAAAhJXtrgSWJfb RT-Send-Cc: X-RT-Original-Encoding: us-ascii Content-Length: 309 Thanks. This is a known vulnerability, and we have already issued a patch and advisory. (ticket #6608, MITKRB5-SA-2009-003 CVE-2009-3295) It will also be fixed in the upcoming 1.7.1 release. As far as we can tell, it appears to have nothing (directly) to do with pkinit, despite what you see in your logs.