[krbdev.mit.edu #8075] git commit

[Tom Yu via RT]

Fix kadmind server validation [CVE-2014-9422]

[MITKRB5-SA-2015-001] In kadmind's check_rpcsec_auth(), use
data_eq_string() instead of strncmp() to check components of the
server principal, so that we don't erroneously match left substrings
of "kadmin", "history", or the realm.

(cherry picked from commit 6609658db0799053fbef0d7d0aa2f1fd68ef32d8)

https://github.com/krb5/krb5/commit/9f6758ce9d1462ca94882e0e85e2a1d48cd32b0e
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 9f6758ce9d1462ca94882e0e85e2a1d48cd32b0e
Branch: krb5-1.11
 src/kadmin/server/kadm_rpc_svc.c |   12 +++---------
 1 files changed, 3 insertions(+), 9 deletions(-)