kinit issue
prashant sodhiya
prashant_sodhiya at rediffmail.com
Tue Aug 30 09:55:03 EDT 2005
Hi,
In MIT kerberos a "kinit" creates a credential file in /tmp, which is a world-writable directory.
$ ls -l /
drwxrwxrwt 9 bin bin 3584 Aug 30 15:07 tmp
I feel it can lead to Denial of Service attack if some other user can create a credential file as that of a valid kerberos user.
Is it true in MIT kerberos?.How it handled in MIT Kerberos?
Pls give some insights into it.
thnx n regards
Prashant
More information about the Kerberos
mailing list