lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 04 Jan 2010 23:59:32 -0500
From: Tom Yu <tlyu@....edu>
To: bugtraq@...urityfocus.com
Cc: krbcore-security@....edu
Subject: UPDATE: MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Updated to reflect the need to authenticate for successful
exploitation.  This decreases the severity level of the vulnerability.

    http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (SunOS)

iEYEARECAAYFAktCxzcACgkQSO8fWy4vZo5vdgCgkB8odnwOQixbESFIpqoF0O6t
CboAoNfB6WfXjCnMzAKRe9ZgRyyYAk7b
=87Ju
-----END PGP SIGNATURE-----

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux - Powered by OpenVZ