krb5 commit [krb5-1.11]: Add test case for CVE-2013-1417
Tom Yu
tlyu at MIT.EDU
Mon Jul 1 22:38:30 EDT 2013
https://github.com/krb5/krb5/commit/1ad86eb6c838dc8b8f375a5a838afbd7fb32fbef
commit 1ad86eb6c838dc8b8f375a5a838afbd7fb32fbef
Author: Tom Yu <tlyu at mit.edu>
Date: Mon Jul 1 22:20:41 2013 -0400
Add test case for CVE-2013-1417
(back ported from commit f3328214a01fe9ca4de72cb9593ee10c39c638e9)
ticket: 7670
version_fixed: 1.11.4
status: resolved
src/tests/Makefile.in | 1 +
src/tests/t_cve-2013-1417.py | 13 +++++++++++++
2 files changed, 14 insertions(+), 0 deletions(-)
diff --git a/src/tests/Makefile.in b/src/tests/Makefile.in
index c79c089..ab45ea5 100644
--- a/src/tests/Makefile.in
+++ b/src/tests/Makefile.in
@@ -86,6 +86,7 @@ check-pytests:: hist
# $(RUNPYTEST) $(srcdir)/kdc_realm/kdcref.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_cve-2012-1014.py $(PYTESTFLAGS)
$(RUNPYTEST) $(srcdir)/t_cve-2012-1015.py $(PYTESTFLAGS)
+ $(RUNPYTEST) $(srcdir)/t_cve-2013-1417.py $(PYTESTFLAGS)
clean::
$(RM) krb5.conf kdc.conf
diff --git a/src/tests/t_cve-2013-1417.py b/src/tests/t_cve-2013-1417.py
new file mode 100644
index 0000000..634b42f
--- /dev/null
+++ b/src/tests/t_cve-2013-1417.py
@@ -0,0 +1,13 @@
+#!/usr/bin/python
+
+from k5test import *
+
+realm = K5Realm(realm='TEST')
+
+# CVE-2013-1417 KDC dereferences null pointer
+
+realm.kinit(realm.user_princ, password('user'))
+realm.run_as_client([kvno, '-S', 'host', 'example.com'], expected_code=1)
+# Make sure KDC is still running.
+realm.kinit(realm.user_princ, password('user'))
+success('CVE-2013-1417 regression test')
More information about the cvs-krb5
mailing list