Advanced

Kerberos flaw opens apps to attack

Posted by linuxquestions on · 2 comments
ZDNet UK		Mail this story
Print this story

Two serious security flaws in a technology widely used for network authentication could expose a swath of software products to hacker attack, experts have warned. The flaws could allow an online intruder to crash or gain access to computers running Kerberos, a freely available authentication technology that was developed by the Massachusetts Institute of Technology.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups:

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

dominic ·
Well this article has no meat. An earlier article on the same site at least mentions the flaw which was a double-free vulnerability (same memory is freed twice).

http://news.zdnet.co.uk/internet/security/0,39020375,3916527...

Now, I'm no cracker, but that sounds like a pretty hard target to hit... Now as for the part about Microsoft's version not being vulnerable, I'd like to see the code to believe it ;)
dominic ·
Actually, they do give the link to the Kerberos advisory but don't include the info from them. One is another double-free flaw and the other is a buffer overflow.

There's only one possible response: Abandon all logic and Live In Fear(tm)!

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post