Knowledge Base

Summary

This patch includes a critical security update to the service console to fix issues in Kerberos 5 . The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2008-0062, CVE-2008-0063, and CVE-2008-0948 to these issues.

These issues are described as follows at cve.mitre.org:

• KDC in MIT Kerberos 5 does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted messages that trigger a NULL pointer de-reference or a double-free error.(CVE-2008-0062)
  Note: ESX Server doesn't contain the krb5kdc binary and is not vulnerable to this issue.
   
• The Kerberos 4 support in KDC in MIT Kerberos 5 does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information.(CVE-2008-0063)
  Note: ESX Server doesn't contain the krb5kdc binary and is not vulnerable to this issue.
   
• Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering a large number of open file descriptors. (CVE-2008-0948)