projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1433162) | patch
pull up r19914 from trunk
authorTom Yu <tlyu@mit.edu>
Wed, 5 Sep 2007 21:27:23 +0000 (21:27 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 5 Sep 2007 21:27:23 +0000 (21:27 +0000)
commit5cf3f61e11ef9e42a0602a6e84290da39712a9fe
tree4e04c3cad396932338a82f5b3b97f47b106f4ee9tree | snapshot
parent1433162454b5dc9a5aaccc53a582df1233354d44commit | diff
pull up r19914 from trunk

 r19914@cathode-dark-space:  tlyu | 2007-09-04 14:53:09 -0400
 ticket: new
 target_version: 1.6.3
 tags: pullup
 subject: fix CVE-2007-4000 modify_policy vulnerability

 In kadm5_modify_policy_internal, check for nonexistence of policy
 before doing anything with it, to avoid memory corruption.

ticket: 5707
version_fixed: 1.6.3

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@19926 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/kadm5/srv/svr_policy.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.