Skip Menu |
 

From: tlyu@mit.edu
Subject: SVN Commit
pointer. This may lead to execution of arbitrary code.

CVE-2007-2443/VU#365313: The RPC library can write past the end of a
stack buffer. This may (but is unlikely to) lead to execution of
arbitrary code.


Commit By: tlyu



Revision: 19636
Changed Files:
_U trunk/
U trunk/src/lib/rpc/svc_auth_gssapi.c
U trunk/src/lib/rpc/svc_auth_unix.c
From: tlyu@mit.edu
Subject: SVN Commit
pull up r19636 from trunk

r19636@cathode-dark-space: tlyu | 2007-06-26 14:08:20 -0400
ticket: new
target_version: 1.6.2
tags: pullup
subject: fix MITKRB5-SA-2007-004 [CVE-2007-2442/VU#356961, CVE-2007-2443/VU#365313]

CVE-2007-2442/VU#356961: The RPC library can free an uninitialized
pointer. This may lead to execution of arbitrary code.

CVE-2007-2443/VU#365313: The RPC library can write past the end of a
stack buffer. This may (but is unlikely to) lead to execution of
arbitrary code.




Commit By: tlyu



Revision: 19638
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/rpc/svc_auth_gssapi.c
U branches/krb5-1-6/src/lib/rpc/svc_auth_unix.c