heimdal Update for Debian
Posted on: 03/27/2003 12:35 AM

A heimdal update for Debian GNU/Linux has been released

A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for unauthorized client principals if triple-DES keys are used to key krb4 services. These attacks can subvert a site's entire Kerberos authentication infrastructure.

Read more

Printed from Linux Compatible (http://www.linuxcompatible.org/news/story/heimdal_update_for_debian.html)