Kerberos Bug needs a fix
- TAGS:comprimise, Kerberos, services
- IT TOPICS:Security
The Kerberos authentication protocol (MIT Kerberos 5 release, up to and including krb5-1.6.3) has been discovered to have several serious vulnerabilities. MIT developed the popular Kerberos as a means for authenticating requests for services in computer networks, but now flaws have been found that could be exploited by hackers to executive arbitrary code on selected targets. The problems lie in the Kerberos 5 Key Distribution Center program and libraries and also in the management of open file descriptors and ultimately possible memory corruption.
While the potential for compromise has been identified, no exploits have been reported as yet. Users are advised to apply workarounds or better yet, update to version kbr5-1.6.4 if they haven't already done so.
Free Insider Guide