A vulnerability has been reported in Kerberos, which can potentially be exploited by malicious people to cause a DoS (Denial of Service) or to compromise a vulnerable system.

The vulnerability is caused due to an error in the handling of xprt->xp_auth pointers when freeing structures in memory. This can be exploited to crash the daemon or execute arbitrary code via a specially crafted kerberos packet.

The vulnerability is reported in the following versions:
* krb5-1.4 through krb5-1.4.4
* krb5-1.5 through krb5-1.5.1

Other versions may also be affected.

Solution
Apply patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Andrew Korty from Indiana University.

Original Advisory
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers