KerberosV5 KDC Information Disclosure Vulnerability

Overview

» IDS/IPS Signatures

Security Sites

iPolicy Networks Security Advisory


Date Discovered:	03/19/2008
Severity:	High
Applications Affected	KerberosV5, KDC 1.6.3 and previous

Synopsis

Information Disclosure Vulnerability has been identified in the KerberosV5 KDC before 1.6.3.

Recommended Actions

Upgrade with latest patch.
http://web.mit.edu/kerberos/advisories/2008-001-patch.txt

Threat Analysis

Kerberos is a computer network authentication protocol, which allows individuals communicating over a non-secure network to prove their identity to one another in a secure manner. Its design is based on client-server model.It provides mutual authentication: as both the user and the server verify each other's identity. Kerberos protocol messages are protected against eavesdropping and replay attacks.

A Information Disclosure Vulnerability has been identified in KerberosV5 KDC 1.6.3 and prior. This issue is due to a failure in the applicatiton to clear the unused portion of a buffer when generating an error message. An attacker can take advantage of this issue get sensitive information.

References

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0063
http://securitytracker.com/alerts/2008/Mar/1019627.html
http://www.securityfocus.com/bid/28303
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
http://www.mandriva.com/security/advisories?name=MDVSA-2008:071

Write-up by: Vinod Sharma

Security Sites

“iPolicy is one of the most visionary firewall vendors in the firewall Magic Quadrant. Its architecture of a central session processing engine and multiple content blades that are able to block based on signatures, rules and so on is the closest to the network security ideal.”

Greg Young, John Pescatore
Magic Quadrant for Network Firewalls, 2H04, Gartner

| | | | | | | | |