#670: SAM doesn't protect against replays.

RT for krbdev.mit.edu

Ticket metadata Hide unset fields

The Basics

Id:	670
Status:	new
Priority:	75/
Queue:	krb5

Custom Fields

Component:	krb5-kdc
Tags:	(no value)
Version_reported:	(no value)
Version_Fixed:	(no value)
Target_Version:	(no value)

People

Owner:	Nobody in particular
Requestors:	<fcusack@iconnet.net>
Cc:
AdminCc:

More about the requestors

<fcusack@iconnet.net> User Summary

Comments about this user: No comment entered about this user

This user's 10 highest priority active tickets:

681	Nobody in particular	It's possible to replay another principal's SAM data.	new
670	Nobody in particular	SAM doesn't protect against replays.	new
665	Nobody in particular	sam-response must go to the same KDC that sent sam-challenge	new
672	Nobody in particular	gethostid() not portable; shouldn't encrypt sam-track-id w/ K/M	new
668	Nobody in particular	unify sam_track_id data; securid fixes	new
664	Nobody in particular	checksum vulnerability in SAM preauth	new
663	Nobody in particular	a structure field name change to align with passwords-04	new
662	Nobody in particular	Multiple bugs in KDC and client preauth	new
660	Nobody in particular	windows vardlg (new creds "prompter") doesn't size well.	new
658	Nobody in particular	new creds API prompter_fct doesn't use sam_type_name	new

Groups this user belongs to

Everyone
Unprivileged

Reminders

Dates

Created:	Tue Dec 01 22:10:01 1998
Starts:	Not set
Started:	Not set
Last Contact:	Not set
Due:	Not set
Closed:	Not set
Updated:	Fri Jan 09 16:56:16 2004 by hartmans (Sam Hartman)

Links Graph

Depends on:
Depended on by:
Parents:
Children:
Refers to:
Referred to by:

History

Loading...