Kerberos
is a computer network authentication protocol, which allows nodes
communicating over a non-secure network to prove their identity to one
another in a secure manner.
There exists a denial of service vulnerability in Key
Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.7 before 1.7.2,
and 1.8 alpha
The flaw exists due to an error in KDC when handling authorization
data.
Successful
exploitation may allow remote
attackers to crash the KDC service, resulting in a denial of
service
condition via an an invalid AS-REQ
or TGS-REQ request.
|
