Welcome to our website
heimdal Update for Debian
Posted by philipp on: 03/27/2003 12:35 AM [ Print | 0 comment(s) ]
A heimdal update for Debian GNU/Linux has been released
A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for unauthorized client principals if triple-DES keys are used to key krb4 services. These attacks can subvert a site's entire Kerberos authentication infrastructure.