projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 581bc90) | patch
fix MITKRB5-SA-2007-005 [CVE-2007-2798/VU#554257]
authorTom Yu <tlyu@mit.edu>
Tue, 26 Jun 2007 18:08:35 +0000 (18:08 +0000)
committerTom Yu <tlyu@mit.edu>
Tue, 26 Jun 2007 18:08:35 +0000 (18:08 +0000)
commit1b52a1fd30640202d3b4eee7c537c1bbb5d84e9e
tree9ad584352734fdd992139141635112b60b734265tree | snapshot
parent581bc90958d2fbda2bb3547e9b854f5c004a430acommit | diff
fix MITKRB5-SA-2007-005 [CVE-2007-2798/VU#554257]

Truncate the principal names when logging a rename operation to avoid
a stack buffer overflow.

ticket: new
target_version: 1.6.2
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19637 dc483132-0cff-0310-8789-dd5450dbe970
src/kadmin/server/server_stubs.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.