svn rev #19913: trunk/ src/lib/rpc/

tlyu@MIT.EDU tlyu at MIT.EDU
Tue Sep 4 14:52:56 EDT 2007


Commit By: tlyu
Log Message: 
ticket: new
subject: fix CVE-2007-3999 svc_auth_gss.c buffer overflow
target_version: 1.6.3
tags: pullup
component: krb5-libs

Make sure svcauth_gss_validate adequately checks oa->oa_length prior
to copying into rpcbuf.



Changed Files:
_U  trunk/
U   trunk/src/lib/rpc/svc_auth_gss.c



More information about the cvs-krb5 mailing list