1. Ubuntu Security Notices
  2. USN-755-1

USN-755-1: Kerberos vulnerabilities

Publication date

7 April 2009

Overview

Kerberos vulnerabilities

Releases

Packages

Details

Multiple flaws were discovered in the Kerberos GSS-API and ASN.1 routines
that did not correctly handle certain requests. An unauthenticated remote
attacker could send specially crafted traffic to crash services using
the Kerberos library, leading to a denial of service.

Multiple flaws were discovered in the Kerberos GSS-API and ASN.1 routines
that did not correctly handle certain requests. An unauthenticated remote
attacker could send specially crafted traffic to crash services using
the Kerberos library, leading to a denial of service.

Update instructions

After a standard system upgrade you need to restart any services using the Kerberos libraries to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
8.10 intrepid libkrb53 –  1.6.dfsg.4~beta1-3ubuntu0.1
libkadm55 –  1.6.dfsg.4~beta1-3ubuntu0.1
8.04 hardy libkrb53 –  1.6.dfsg.3~beta1-2ubuntu1.1
libkadm55 –  1.6.dfsg.3~beta1-2ubuntu1.1
7.10 gutsy libkrb53 –  1.6.dfsg.1-7ubuntu0.2
libkadm55 –  1.6.dfsg.1-7ubuntu0.2
6.06 dapper libkrb53 –  1.4.3-5ubuntu0.8
libkadm55 –  1.4.3-5ubuntu0.8

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›