Skip Menu |
 

From: tlyu@mit.edu
Subject: SVN Commit

pull up r19914 from trunk

r19914@cathode-dark-space: tlyu | 2007-09-04 14:53:09 -0400
ticket: new
target_version: 1.6.3
tags: pullup
subject: fix CVE-2007-4000 modify_policy vulnerability

In kadm5_modify_policy_internal, check for nonexistence of policy
before doing anything with it, to avoid memory corruption.




Commit By: tlyu



Revision: 20291
Changed Files:
_U branches/krb5-1-5/
U branches/krb5-1-5/src/lib/kadm5/srv/svr_policy.c