Local or remote users can obtain root access on the system running krshd from the MIT port of Kerberos 5. The vulnerability is a buffer overrun in the krb_rd_req() function which is used by essentially all Kerberos-authenticated services that use Kerberos 4 compatibility code for authentication within the MIT Kerberos 5 source distributions.
Classification
Location:
Local Access Required,
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
Solution
Upgrade to version krb5-1.2 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround: Disable the krshd program completely until a patched version can be installed.
jtan.com -