Alert GCSA-11076 - Vulnerabilita' in MIT Kerberos

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

    Alert ID : GCSA-11076
        Data : 21 ottobre 2011
      Titolo : Vulnerabilita' in MIT Kerberos

******************************************************************

:: Descrizione del problema

    Sono state identificate varie vulnerabilita' in MIT Kerberos
    che potrebbero essere sfruttate per condurre attacchi
    di tipo Denial of Service.


:: Piattaforme e Software interessati

    MIT Kerberos 5 1.8.4
    MIT Kerberos 5 1.8.3
    MIT Kerberos 5 1.8.2
    MIT Kerberos 5 1.8.1
    MIT Kerberos 5 1.8
    MIT Kerberos 5 1.9


:: Impatto

    Denial of Service


:: Soluzione

    Applicare le seguenti patch:

    per krb5-1.9.x
    http://web.mit.edu/kerberos/advisories/2011-006-patch.txt

    per krb5-1.8.x
    http://web.mit.edu/kerberos/advisories/2011-006-patch-r18.txt


:: Riferimenti

    MIT Kerberos
    http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt

    SecurityFocus BID
    http://www.securityfocus.com/bid/50273

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1527
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1528
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1529


-----BEGIN PGP SIGNATURE-----

iQCVAwUBTqGA/vOB+SpikaiRAQKGXAQAoWdrlZ5ax3luwpMFzYCUiFyYp3BOm8kI
RYW+diESNMnbwJfH0lta1t/DPqJYPrmy00nep/qO/L+6ePCDXPicrGrtd7SEVfnW
1i9CnD/qocjD/3tdnGKb8SgiuX9gwokiVru+HXDLcGqyB8rK3zjajshzszqIVD2s
bBfC+Usi1V4=
=Q5Gs
-----END PGP SIGNATURE-----