krb5 security update

CentOS Errata and Security Advisory CESA-2008:0164 Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network...

CVE-2007-5901

Use-after-free vulnerability in the gssindicatemechs function in lib/gssapi/mechglue/ginitialize.c in MIT Kerberos 5 krb5 has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code...

CVE-2007-5901

CVE-2007-5901 is a use-after-free in MIT Kerberos 5 in the gss_indicate_mechs path (lib/gssapi/mechglue/g_initialize.c). The connected advisories describe backported patches to fix use-after-free in libgssapi_krb5 (and related components), with MiracleLinux AXSA-2008-153/2008-345 noting the backp...

CVE-2006-5901

CVE-2006-5901 affects Hawking Technology wireless router WR254-CA. The entry notes the device uses a hardcoded IP address among DNS server addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at that hardcoded address....