CVE-2006-5989

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

CVE-2006-5989

CVE-2006-5989 arises from an off-by-one bug in the der_get_oid() handling within mod_auth_kerb 5.0, causing a heap-based buffer overflow in the component array. Multiple advisories (Debian DSA-1247-1, Gentoo GLSA-200701-14, Fedora 2006-1341) describe that a crafted Kerberos message could crash th...