----------------------------------------------------------------------



Accurate Vulnerability Scanning
No more false positives, no more false negatives

http://secunia.com/vulnerability_scanning/



----------------------------------------------------------------------

TITLE:
Kerberos KDC RC4 and AES Decryption Integer Underflow Vulnerabilities

SECUNIA ADVISORY ID:
SA38080

VERIFY ADVISORY:
http://secunia.com/advisories/38080/

DESCRIPTION:
Some vulnerabilities have been reported in Kerberos KDC, which can be
exploited by malicious people to cause a DoS (Denial of Service) and
potentially compromise a vulnerable system.

The vulnerabilities are caused due to integer underflows within the
AES and RC4 decryption when handling ciphertexts shorter than the
minimum expected length. This can be exploited to cause a heap
corruption by e.g. tricking KDC to decrypt a specially crafted
ciphertext.

SOLUTION:
Update to version 1.6.4 and 1.7.1 as soon as available or apply
patches.

Patch for krb5-1.6:
http://web.mit.edu/kerberos/advisories/2009-004-patch_1.6.3.txt.asc

Patch for krb5-1.7:
http://web.mit.edu/kerberos/advisories/2009-004-patch_1.7.txt.asc

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2009-004.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------