Description
Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
References
- RHSA-2003:052 vendor-advisory
- http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt
- RHSA-2003:051 vendor-advisory
- MDKSA-2003:043 vendor-advisory
- 4896 vdb-entry
- 6713 vdb-entry
- kerberos-kdc-neglength-bo(11190) vdb-entry
- CLA-2003:639 vendor-advisory
- VU#587579 third-party-advisory
- RHSA-2003:168 vendor-advisory