Some vulnerabilities have been reported in Kerberos KDC, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerabilities are caused due to integer underflows within the AES and RC4 decryption when handling ciphertexts shorter than the minimum expected length. This can be exploited to cause a heap corruption by e.g. tricking KDC to decrypt a specially crafted ciphertext.

Solution
Update to version 1.6.4 and 1.7.1 as soon as available or apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2009-004.txt

Deep Links
Links available to Secunia VIM customers