Ticket History #3425: Buffer overflows in kdb_load_library could lead to arbitrary code execution

RT for krbdev.mit.edu

History Show all quoted text — Show full headers

# Fri Jan 27 17:34:52 2006 hartmans (Sam Hartman) - Ticket created

To:	krb5-bugs@MIT.EDU
Subject:	Buffer overflows in kdb_load_library could lead to arbitrary code execution
Date:	Fri, 27 Jan 2006 16:38:44 -0500 (EST)
From:	hartmans@MIT.EDU (Sam Hartman)

Download (untitled) / with headers
text/plain 257B

It looks like there is no check to make sure that the database name
and locations both read from the configuration file do not overflow
the statically allocated buffer.

This is probably not a huge deal but it is not something we should ship with.

--Sam