The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.

SunOS 5.10_x86: libgss.so.1 patch.
Date this patch was last updated by Sun : Jun/03/09

SunOS 5.10: libgss.so.1 patch.
Date this patch was last updated by Sun : Jun/03/09

Bugs in the handling of pointers to uninitializes resp. already freed memory could potentially be abused by attackers to execute code.
(CVE-2006-6144 / CVE-2006-6143)

Bugs in the handling of pointers to uninitializes resp. already freed memory could potentially be abused by attackers to execute code (CVE-2006-6144, CVE-2006-6143).

The remote host is affected by the vulnerability described in GLSA-200701-21 (MIT Kerberos 5: Arbitrary Remote Code Execution)

    The Kerberos administration daemon, and possibly other applications     using the GSS-API or RPC libraries, could potentially call a function     pointer in a freed heap buffer, or attempt to free an uninitialized     pointer.
  Impact :

    A remote attacker may be able to crash an affected application, or     potentially execute arbitrary code with root privileges.
  Workaround :

    There is no known workaround at this time.

This update incorporates fixes for recently-announced bugs found in the kadmind daemon.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SunOS 5.9_x86: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

SunOS 5.9: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

ID	Name	Product	Family	Severity
108028	Solaris 10 (x86) : 141720-01	Nessus	Solaris Local Security Checks	medium
107529	Solaris 10 (sparc) : 141719-01	Nessus	Solaris Local Security Checks	medium
39310	Solaris 10 (x86) : 141720-01	Nessus	Solaris Local Security Checks	medium
39308	Solaris 10 (sparc) : 141719-01	Nessus	Solaris Local Security Checks	medium
29491	SuSE 10 Security Update : Kerberos5 (ZYPP Patch Number 2440)	Nessus	SuSE Local Security Checks	high
27307	openSUSE 10 Security Update : krb5 (krb5-2442)	Nessus	SuSE Local Security Checks	high
24257	GLSA-200701-21 : MIT Kerberos 5: Arbitrary Remote Code Execution	Nessus	Gentoo Local Security Checks	high
24189	Fedora Core 6 : krb5-1.5-13 (2007-033)	Nessus	Fedora Local Security Checks	high
13620	Solaris 9 (x86) : 115168-24	Nessus	Solaris Local Security Checks	critical
13520	Solaris 9 (sparc) : 112908-38	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2006-6144

high

Tenable Plugins

medium

medium

medium

medium

high

high

high

high

critical

critical