ZDNet UK: Kerberos harbours critical flaws

Ken Raeburn raeburn at MIT.EDU
Mon Oct 13 12:32:42 EDT 2008


On Oct 13, 2008, at 12:23, Paul Moore wrote:
> Which bugs is this article referring to
>
> ------------------------------------------------------------
> http://news.zdnet.co.uk/security/0,1000000189,39165276,00.htm
>
> Kerberos harbours critical flaws
>
> The network-authentication technology can leave computers running  
> Unix, Linux
> or Mac OS X vulnerable


They mention double-free problems, and the article is from September  
2004, so I expect it's referring to the flaw in advisory MITKRB5- 
SA-2004-002 (listed at http://web.mit.edu/kerberos/advisories/) which  
had come out a few days before.

Ken



More information about the Kerberos mailing list