Skip Menu |
 

History Show all quoted text — Show full headers
# Mon Dec 28 21:42:52 2009 tlyu (Taylor Yu) - Ticket created
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 404B

On certain error conditions, prep_reprocess_req() calls kdc_err() with
a null pointer as the format string, causing a null dereference and
denial of service. Legitimate protocol requests can trigger this
problem.

https://github.com/krb5/krb5/commit/289555f989b42f2b8d13efe4904dc3515433d5e5
Commit By: tlyu
Revision: 23533
Changed Files:
U trunk/src/kdc/do_tgs_req.c
U trunk/src/lib/kadm5/logger.c
# Mon Dec 28 21:42:52 2009 tlyu (Taylor Yu) - Requestor tlyu (Taylor Yu) added
# Mon Dec 28 21:42:52 2009 tlyu (Taylor Yu) - Status changed from 'new' to 'review'
# Mon Dec 28 21:42:52 2009 tlyu (Taylor Yu) - Tags pullup added
# Mon Dec 28 21:42:52 2009 tlyu (Taylor Yu) - Target_Version 1.7.1 added
# Mon Dec 28 21:56:47 2009 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'
# Mon Dec 28 21:56:47 2009 tlyu (Taylor Yu) - Version_Fixed 1.7.1 added
# Mon Dec 28 21:56:47 2009 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 731B

pull up r23533 from trunk

------------------------------------------------------------------------
r23533 | tlyu | 2009-12-28 21:42:51 -0500 (Mon, 28 Dec 2009) | 10 lines

ticket: 6608
subject: MITKRB5-SA-2009-003 CVE-2009-3295 KDC null deref in referrals
tags: pullup
target_version: 1.7.1

On certain error conditions, prep_reprocess_req() calls kdc_err() with
a null pointer as the format string, causing a null dereference and
denial of service. Legitimate protocol requests can trigger this
problem.

https://github.com/krb5/krb5/commit/6419f49ecd068cb116d1ebe6010ac03f22aa9f83
Commit By: tlyu
Revision: 23534
Changed Files:
U branches/krb5-1-7/src/kdc/do_tgs_req.c
U branches/krb5-1-7/src/lib/kadm5/logger.c
# Wed Dec 16 18:02:54 2015 tlyu (Taylor Yu) - CustomField pullup deleted