Ticket History #5707: fix CVE-2007-4000 modify

# Tue Sep 04 14:53:14 2007 tlyu (Taylor Yu) - Ticket created

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 269B

In kadm5_modify_policy_internal, check for nonexistence of policy
before doing anything with it, to avoid memory corruption.

Commit By: tlyu

Revision: 19914
Changed Files:
_U trunk/
U trunk/src/lib/kadm5/srv/svr_policy.c
U trunk/src/lib/krb5/krb/gc_frm_kdc.c

# Tue Sep 04 14:53:17 2007 tlyu (Taylor Yu) - Requestor tlyu (Taylor Yu) added

# Tue Sep 04 14:53:17 2007 tlyu (Taylor Yu) - Status changed from 'new' to 'resolved'

# Tue Sep 04 14:53:18 2007 tlyu (Taylor Yu) - Tags pullup added

# Tue Sep 04 14:53:18 2007 tlyu (Taylor Yu) - Target_Version 1.6.3 added

# Tue Sep 04 14:54:29 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 143B

revert accidental commit of gc_frm_kdc.c

Commit By: tlyu

Revision: 19915
Changed Files:
_U trunk/
U trunk/src/lib/krb5/krb/gc_frm_kdc.c

# Tue Sep 04 14:56:42 2007 tlyu (Taylor Yu) - Component krb5-admin added

# Wed Sep 05 17:27:32 2007 tlyu (Taylor Yu) - Version_Fixed 1.6.3 added

# Wed Sep 05 17:27:32 2007 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 456B

pull up r19914 from trunk

r19914@cathode-dark-space: tlyu | 2007-09-04 14:53:09 -0400
ticket: new
target_version: 1.6.3
tags: pullup
subject: fix CVE-2007-4000 modify_policy vulnerability

In kadm5_modify_policy_internal, check for nonexistence of policy
before doing anything with it, to avoid memory corruption.

Commit By: tlyu

Revision: 19926
Changed Files:
_U branches/krb5-1-6/
U branches/krb5-1-6/src/lib/kadm5/srv/svr_policy.c

# Wed Dec 16 18:02:50 2015 tlyu (Taylor Yu) - CustomField pullup deleted

Ticket History #5707: fix CVE-2007-4000 modify_policy vulnerability