A vulnerability has been reported in Kerberos, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the "encrypt_keyid()" function (libtelnet/encrypt.c), which can be exploited to cause a buffer overflow by sending specially crafted commands to the server.

This is related to:
SA47397

The vulnerability is reported in krb5 versions prior to 1.8 and all versions of krb5-appl.

Solution
Update to krb5 version 1.8. Apply patch for krb5-appl.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
MITKRB5-SA-2011-008:
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2011-008.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers