Skip Menu |
 

History Show all quoted text — Show full headers
# Tue Mar 25 00:15:18 2008 tlyu (Taylor Yu) - Ticket created
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 457B

pull up r19914 from trunk

r19914@cathode-dark-space: tlyu | 2007-09-04 14:53:09 -0400
ticket: new
target_version: 1.6.3
tags: pullup
subject: fix CVE-2007-4000 modify_policy vulnerability

In kadm5_modify_policy_internal, check for nonexistence of policy
before doing anything with it, to avoid memory corruption.




Commit By: tlyu



Revision: 20291
Changed Files:
_U branches/krb5-1-5/
U branches/krb5-1-5/src/lib/kadm5/srv/svr_policy.c
# Tue Mar 25 00:15:21 2008 tlyu (Taylor Yu) - Requestor tlyu (Taylor Yu) added
# Tue Mar 25 00:15:21 2008 tlyu (Taylor Yu) - Status changed from 'new' to 'resolved'
# Tue Mar 25 00:15:22 2008 tlyu (Taylor Yu) - Component krb5-admin added
# Tue Mar 25 00:15:22 2008 tlyu (Taylor Yu) - Target_Version 1.5.5 added
# Tue Mar 25 00:15:23 2008 tlyu (Taylor Yu) - Version_Fixed 1.5.5 added
# Tue Mar 25 00:17:09 2008 tlyu (Taylor Yu) - Ticket 5929 RefersTo ticket 5707.