MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability

Bugtraq ID:	38260
Class:	Input Validation Error
CVE:	CVE-2010-0283
Remote:	Yes
Local:	No
Published:	Feb 16 2010 12:00AM
Updated:	Apr 13 2015 09:52PM
Credit:	Emmanuel Bouillon (NATO C3 Agency)
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 S.u.S.E. openSUSE 11.2 MIT Kerberos 5 1.7.1 MIT Kerberos 5 1.7 Gentoo Linux Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6
Not Vulnerable:	Apple Mac OS X Server 10.6.4 Apple Mac OS X 10.6.4

MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability

MIT Kerberos is prone to a remote denial-of-service vulnerability.

An attacker may exploit this issue to crash the KDC service, resulting in a denial-of-service condition.

MIT Kerberos 5 1.7 and 1.7.1 are vulnerable.

MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability

MIT reports that a private exploit has been developed. This exploit is not otherwise publicly available or known to be circulating in the wild.

MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu krb5-admin-server_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-admin-server_1.7dfsg ~beta3-1ubuntu0.5_sparc.deb


• Ubuntu krb5-clients_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-clients_1.7dfsg~beta 3-1ubuntu0.5_sparc.deb


• Ubuntu krb5-doc_1.7dfsg~beta3-1ubuntu0.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.7dfsg~be ta3-1ubuntu0.5_all.deb


• Ubuntu krb5-ftpd_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-ftpd_1.7dfsg~beta3-1 ubuntu0.5_sparc.deb


• Ubuntu krb5-kdc-ldap_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc-ldap_1.7dfsg~bet a3-1ubuntu0.5_sparc.deb


• Ubuntu krb5-kdc_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc_1.7dfsg~beta3-1u buntu0.5_sparc.deb


• Ubuntu krb5-pkinit_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-pkinit_1.7dfsg~beta3 -1ubuntu0.5_sparc.deb


• Ubuntu krb5-rsh-server_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-rsh-server_1.7dfsg~b eta3-1ubuntu0.5_sparc.deb


• Ubuntu krb5-telnetd_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-telnetd_1.7dfsg~beta 3-1ubuntu0.5_sparc.deb


• Ubuntu krb5-user_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/krb5-user_1.7dfsg~beta3-1ubun tu0.5_sparc.deb


• Ubuntu libgssapi-krb5-2_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssapi-krb5-2_1.7dfsg~beta 3-1ubuntu0.5_sparc.deb


• Ubuntu libgssrpc4_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssrpc4_1.7dfsg~beta3-1ubu ntu0.5_sparc.deb


• Ubuntu libk5crypto3_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libk5crypto3_1.7dfsg~beta3-1u buntu0.5_sparc.deb


• Ubuntu libkadm5clnt6_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5clnt6_1.7dfsg~beta3-1 ubuntu0.5_sparc.deb


• Ubuntu libkadm5srv6_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5srv6_1.7dfsg~beta3-1u buntu0.5_sparc.deb


• Ubuntu libkdb5-4_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkdb5-4_1.7dfsg~beta3-1ubun tu0.5_sparc.deb


• Ubuntu libkrb5-3_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-3_1.7dfsg~beta3-1ubun tu0.5_sparc.deb


• Ubuntu libkrb5-dbg_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dbg_1.7dfsg~beta3-1ub untu0.5_sparc.deb


• Ubuntu libkrb5-dev_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dev_1.7dfsg~beta3-1ub untu0.5_sparc.deb


• Ubuntu libkrb5support0_1.7dfsg~beta3-1ubuntu0.5_sparc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5support0_1.7dfsg~beta3 -1ubuntu0.5_sparc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu krb5-admin-server_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-serv er_1.7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-clients_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1. 7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-doc_1.7dfsg~beta3-1ubuntu0.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.7dfsg~be ta3-1ubuntu0.5_all.deb


• Ubuntu krb5-ftpd_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.7df sg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-kdc-ldap_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc-ldap_1 .7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-kdc_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.7dfs g~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-pkinit_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-pkinit_1.7 dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-rsh-server_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server _1.7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-telnetd_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1. 7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu krb5-user_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-user_1.7dfsg~b eta3-1ubuntu0.5_i386.deb


• Ubuntu libgssapi-krb5-2_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libgssapi-krb5-2_1. 7dfsg~beta3-1ubuntu0.5_i386.deb


• Ubuntu libgssrpc4_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libgssrpc4_1.7dfsg~ beta3-1ubuntu0.5_i386.deb


• Ubuntu libk5crypto3_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libk5crypto3_1.7dfs g~beta3-1ubuntu0.5_i386.deb


• Ubuntu libkadm5clnt6_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm5clnt6_1.7df sg~beta3-1ubuntu0.5_i386.deb


• Ubuntu libkadm5srv6_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm5srv6_1.7dfs g~beta3-1ubuntu0.5_i386.deb


• Ubuntu libkdb5-4_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkdb5-4_1.7dfsg~b eta3-1ubuntu0.5_i386.deb


• Ubuntu libkrb5-3_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-3_1.7dfsg~b eta3-1ubuntu0.5_i386.deb


• Ubuntu libkrb5-dbg_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.7dfsg ~beta3-1ubuntu0.5_i386.deb


• Ubuntu libkrb5-dev_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.7dfsg ~beta3-1ubuntu0.5_i386.deb


• Ubuntu libkrb5support0_1.7dfsg~beta3-1ubuntu0.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5support0_1.7 dfsg~beta3-1ubuntu0.5_i386.deb

Apple Mac OS X Server 10.6

• Apple MacOSXServUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu krb5-admin-server_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-admin-server_1.7dfsg ~beta3-1ubuntu0.5_powerpc.deb


• Ubuntu krb5-clients_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-clients_1.7dfsg~beta 3-1ubuntu0.5_powerpc.deb


• Ubuntu krb5-doc_1.7dfsg~beta3-1ubuntu0.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.7dfsg~be ta3-1ubuntu0.5_all.deb


• Ubuntu krb5-ftpd_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-ftpd_1.7dfsg~beta3-1 ubuntu0.5_powerpc.deb


• Ubuntu krb5-kdc-ldap_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc-ldap_1.7dfsg~bet a3-1ubuntu0.5_powerpc.deb


• Ubuntu krb5-kdc_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc_1.7dfsg~beta3-1u buntu0.5_powerpc.deb


• Ubuntu krb5-pkinit_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-pkinit_1.7dfsg~beta3 -1ubuntu0.5_powerpc.deb


• Ubuntu krb5-rsh-server_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-rsh-server_1.7dfsg~b eta3-1ubuntu0.5_powerpc.deb


• Ubuntu krb5-telnetd_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-telnetd_1.7dfsg~beta 3-1ubuntu0.5_powerpc.deb


• Ubuntu krb5-user_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/krb5-user_1.7dfsg~beta3-1ubun tu0.5_powerpc.deb


• Ubuntu libgssapi-krb5-2_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssapi-krb5-2_1.7dfsg~beta 3-1ubuntu0.5_powerpc.deb


• Ubuntu libgssrpc4_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssrpc4_1.7dfsg~beta3-1ubu ntu0.5_powerpc.deb


• Ubuntu libk5crypto3_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libk5crypto3_1.7dfsg~beta3-1u buntu0.5_powerpc.deb


• Ubuntu libkadm5clnt6_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5clnt6_1.7dfsg~beta3-1 ubuntu0.5_powerpc.deb


• Ubuntu libkadm5srv6_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5srv6_1.7dfsg~beta3-1u buntu0.5_powerpc.deb


• Ubuntu libkdb5-4_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkdb5-4_1.7dfsg~beta3-1ubun tu0.5_powerpc.deb


• Ubuntu libkrb5-3_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-3_1.7dfsg~beta3-1ubun tu0.5_powerpc.deb


• Ubuntu libkrb5-dbg_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dbg_1.7dfsg~beta3-1ub untu0.5_powerpc.deb


• Ubuntu libkrb5-dev_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dev_1.7dfsg~beta3-1ub untu0.5_powerpc.deb


• Ubuntu libkrb5support0_1.7dfsg~beta3-1ubuntu0.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5support0_1.7dfsg~beta3 -1ubuntu0.5_powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu krb5-admin-server_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-admin-serv er_1.7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-clients_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-clients_1. 7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-doc_1.7dfsg~beta3-1ubuntu0.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.7dfsg~be ta3-1ubuntu0.5_all.deb


• Ubuntu krb5-ftpd_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-ftpd_1.7df sg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-kdc-ldap_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc-ldap_1 .7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-kdc_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-kdc_1.7dfs g~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-pkinit_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-pkinit_1.7 dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-rsh-server_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-rsh-server _1.7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-telnetd_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/k/krb5/krb5-telnetd_1. 7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu krb5-user_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-user_1.7dfsg~b eta3-1ubuntu0.5_amd64.deb


• Ubuntu libgssapi-krb5-2_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libgssapi-krb5-2_1. 7dfsg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libgssrpc4_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libgssrpc4_1.7dfsg~ beta3-1ubuntu0.5_amd64.deb


• Ubuntu libk5crypto3_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libk5crypto3_1.7dfs g~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libkadm5clnt6_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm5clnt6_1.7df sg~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libkadm5srv6_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkadm5srv6_1.7dfs g~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libkdb5-4_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkdb5-4_1.7dfsg~b eta3-1ubuntu0.5_amd64.deb


• Ubuntu libkrb5-3_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-3_1.7dfsg~b eta3-1ubuntu0.5_amd64.deb


• Ubuntu libkrb5-dbg_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dbg_1.7dfsg ~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libkrb5-dev_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5-dev_1.7dfsg ~beta3-1ubuntu0.5_amd64.deb


• Ubuntu libkrb5support0_1.7dfsg~beta3-1ubuntu0.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/libkrb5support0_1.7 dfsg~beta3-1ubuntu0.5_amd64.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

MIT Kerberos 5 1.7

• MIT 2010-001-patch.txt
  http://web.mit.edu/kerberos/advisories/2010-001-patch.txt

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu krb5-admin-server_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-admin-server_1.7dfsg ~beta3-1ubuntu0.5_lpia.deb


• Ubuntu krb5-clients_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-clients_1.7dfsg~beta 3-1ubuntu0.5_lpia.deb


• Ubuntu krb5-doc_1.7dfsg~beta3-1ubuntu0.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/k/krb5/krb5-doc_1.7dfsg~be ta3-1ubuntu0.5_all.deb


• Ubuntu krb5-ftpd_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-ftpd_1.7dfsg~beta3-1 ubuntu0.5_lpia.deb


• Ubuntu krb5-kdc-ldap_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc-ldap_1.7dfsg~bet a3-1ubuntu0.5_lpia.deb


• Ubuntu krb5-kdc_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-kdc_1.7dfsg~beta3-1u buntu0.5_lpia.deb


• Ubuntu krb5-pkinit_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-pkinit_1.7dfsg~beta3 -1ubuntu0.5_lpia.deb


• Ubuntu krb5-rsh-server_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-rsh-server_1.7dfsg~b eta3-1ubuntu0.5_lpia.deb


• Ubuntu krb5-telnetd_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/universe/k/krb5/krb5-telnetd_1.7dfsg~beta 3-1ubuntu0.5_lpia.deb


• Ubuntu krb5-user_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/krb5-user_1.7dfsg~beta3-1ubun tu0.5_lpia.deb


• Ubuntu libgssapi-krb5-2_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssapi-krb5-2_1.7dfsg~beta 3-1ubuntu0.5_lpia.deb


• Ubuntu libgssrpc4_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libgssrpc4_1.7dfsg~beta3-1ubu ntu0.5_lpia.deb


• Ubuntu libk5crypto3_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libk5crypto3_1.7dfsg~beta3-1u buntu0.5_lpia.deb


• Ubuntu libkadm5clnt6_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5clnt6_1.7dfsg~beta3-1 ubuntu0.5_lpia.deb


• Ubuntu libkadm5srv6_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkadm5srv6_1.7dfsg~beta3-1u buntu0.5_lpia.deb


• Ubuntu libkdb5-4_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkdb5-4_1.7dfsg~beta3-1ubun tu0.5_lpia.deb


• Ubuntu libkrb5-3_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-3_1.7dfsg~beta3-1ubun tu0.5_lpia.deb


• Ubuntu libkrb5-dbg_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dbg_1.7dfsg~beta3-1ub untu0.5_lpia.deb


• Ubuntu libkrb5-dev_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5-dev_1.7dfsg~beta3-1ub untu0.5_lpia.deb


• Ubuntu libkrb5support0_1.7dfsg~beta3-1ubuntu0.5_lpia.deb
  http://ports.ubuntu.com/pool/main/k/krb5/libkrb5support0_1.7dfsg~beta3 -1ubuntu0.5_lpia.deb

MIT Kerberos 5 1.7.1

• MIT 2010-001-patch.txt
  http://web.mit.edu/kerberos/advisories/2010-001-patch.txt

Apple Mac OS X Server 10.6.1

• Apple MacOSXServUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.2

• Apple MacOSXUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.2

• Apple MacOSXServUpdCombo10.6.4.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpd10.6.4.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.3

• Apple MacOSXServerUpd10.6.4.dmg
  http://www.apple.com/support/downloads/

MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability

References:

• Kerberos Homepage (MIT)
  
• MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service (Tom Yu )
  
• MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service (MIT)