Description
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing.
References
- 19981105 security patch for ssh-1.2.26 kerberos code mailing-list
- 4883 vdb-entry