SUSE CVE-2011-0285

The processchpwrequest function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 aka krb5 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted request that triggers a...

CVE-2011-0285

CVE-2011-0285 affects MIT Kerberos 5 kadmind (krb5) 1.7–1.9; the process_chpw_request routine in schpw.c frees an invalid pointer, enabling remote code execution or a daemon crash via a crafted password-change request. Mitigation: upgrade krb5 to a patched release that includes the fix (listed in...