svn rev #20291: branches/krb5-1-5/ src/lib/kadm5/srv/

[tlyu@MIT.EDU]

Commit By: tlyu
Log Message: 
ticket: new
target_version: 1.5.5
version_fixed: 1.5.5
subject: (1.5.x) fix MITKRB5-SA-2007-006 modify_policy vulnerability [CVE-2007-4000]
component: krb5-admin

pull up r19914 from trunk

 r19914 at cathode-dark-space:  tlyu | 2007-09-04 14:53:09 -0400
 ticket: new
 target_version: 1.6.3
 tags: pullup
 subject: fix CVE-2007-4000 modify_policy vulnerability
 
 In kadm5_modify_policy_internal, check for nonexistence of policy
 before doing anything with it, to avoid memory corruption.
 
 




Changed Files:
_U  branches/krb5-1-5/
U   branches/krb5-1-5/src/lib/kadm5/srv/svr_policy.c