Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
heimdal Update for Debian
Posted by philipp on: 03/26/2003 11:35 PM [ Print | 0 comment(s) ]
A heimdal update for Debian GNU/Linux has been released
A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for unauthorized client principals if triple-DES keys are used to key krb4 services. These attacks can subvert a site's entire Kerberos authentication infrastructure.