- ------------------------------------------------------------------------Debian Security Advisory DSA 757-1                   security@debian.org
http://www.debian.org/security/                            Michael Stone
July 17, 2005                         http://www.debian.org/security/faq
- ------------------------------------------------------------------------Package        : krb5
Vulnerability  : remote code execution, denial of service
Problem type   : buffer overflow, double-free memory
Debian-specific: no
CVE Id         : CAN-2005-1689 CAN-2005-1174 CAN-2005-1175

Daniel Wachdorf reported two problems in the MIT krb5 distribution used
for network authentication. First, the KDC program from the krb5-kdc
package can corrupt the heap by trying to free memory which has already
been freed on receipt of a certain TCP connection. This vulnerability
can cause the KDC to crash, leading to a denial of service.
[CAN-2005-1174] Second, under certain rare circumstances this type of
request can lead to a buffer overflow and remote code execution.
[CAN-2005-1175] 

Additionally, Magnus Hagander reported another problem in which the
krb5_recvauth function can in certain circumstances free previously
freed memory, potentially leading to the execution of remote code.
[CAN-2005-1689] 

All of these vulnerabilities are believed difficult to exploit, and no
exploits have yet been discovered.

For the old stable distribution (woody), these problems have been fixed
in version 1.2.4-5woody10. Note that woody's KDC does not have TCP
support and is not vulnerable to CAN-2005-1174.

For the stable distribution (sarge), these problems have been fixed in
version 1.3.6-2sarge2.

For the unstable distribution (sid), these problems have been fixed in
version 1.3.6-4.

We recommend that you upgrade your krb5 package.

Upgrade instructions
- --------------------wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian 3.0 (woody)
- ------------------  Source archives:

          Size/MD5 checksum:    76893 5b603215e39191c75c1f4fd2edbe8944
          Size/MD5 checksum:  5443051 663add9b5942be74a86fa860a3fa4167
          Size/MD5 checksum:      752 9042efb41c85203c4d86636bd9cd21c3

  Architecture independent packages:

          Size/MD5 checksum:   513090 327c3bbc0907bb05dd0254b1a60db870

  alpha architecture (DEC Alpha)

          Size/MD5 checksum:   217690 cb10622be63628c1da8b4205c7b7ded2
          Size/MD5 checksum:   253952 e4fe327ed957565da8c5f0521f5e5ba9
          Size/MD5 checksum:    76604 9e7944be1173418bbedd95c84eb77413
          Size/MD5 checksum:   367586 6ddf1d2523105d601d1b20b197a40037
          Size/MD5 checksum:   207606 07d4dbd7c517f09ab7ba517f40fc9bd8
          Size/MD5 checksum:    59248 2dc334c478bea9a832051020580a136f
          Size/MD5 checksum:    84114 157a11f95aa3ece70e9d0cd3f33f87ae
          Size/MD5 checksum:   633616 293acf78615d48a56eb4565daac329b8
          Size/MD5 checksum:    63234 5a4f25143df406e268865bc91f94e3e5
          Size/MD5 checksum:   252318 1b5c319da05ec2594c84db90c1519550

  arm architecture (ARM)

          Size/MD5 checksum:   493536 9b69be616d0026f813cb433c7848d32b
          Size/MD5 checksum:    49550 06d1dc4bcd335f710ba411a474ccd046
          Size/MD5 checksum:    48968 2f8f3a464865e28cce0de736c1745e07
          Size/MD5 checksum:    73774 4676dc6788200c440f168df96ba242ed
          Size/MD5 checksum:   295360 607785186bac1dc02c4113201be09f0c
          Size/MD5 checksum:   160816 69f1cc7a1e007451015d5a8383a785bb
          Size/MD5 checksum:    63878 7b4fea9e74a84e859f7c93df668e1035
          Size/MD5 checksum:   198826 08140ace1bd33d9896530cac0fbc6fbc
          Size/MD5 checksum:   166128 1cd48debec4cac63f61eb7e17dfee61a
          Size/MD5 checksum:   197470 b89b3ac644154ee046314ec9a02ce17f

  hppa architecture (HP PA RISC)

          Size/MD5 checksum:   190118 eaad40e496e45de08c97f632d0f8dd1c
          Size/MD5 checksum:    56050 debee8549b7a835d06c6f48c893bf716
          Size/MD5 checksum:    54216 06e06866b5753763e220be0d5989f54c
          Size/MD5 checksum:   214822 daba4ea77dbd6c3e28fb1661b364fe6f
          Size/MD5 checksum:   362294 56d96c29e9482a090f6e91ed9102aeb3
          Size/MD5 checksum:    68942 d6a06fcad05ed4585b76ebe5ad18b803
          Size/MD5 checksum:   558296 de93dd7d165861113da1210363ba2a31
          Size/MD5 checksum:   183242 a15f258726ecbf851657efdd94092f3a
          Size/MD5 checksum:    85290 3bff8f09dfe648558cfea40e9a67acfe
          Size/MD5 checksum:   214280 ed9c771762353278034cd3dce8faf3c5

  i386 architecture (Intel ia32)

          Size/MD5 checksum:   293834 bc6017312f8efd0677844c08d5ebfe63
          Size/MD5 checksum:    46778 e58078e1bc869aff67647e85c8678f39
          Size/MD5 checksum:   152490 bd529465aea72043d9fd6d07fcab1a78
          Size/MD5 checksum:    61486 2e556f0c2e59efe407a3e1fab11205cd
          Size/MD5 checksum:    72180 ba4e48f130a61cba189bca9ab894a92b
          Size/MD5 checksum:   434082 ae51928394a4086a4df9e891ec564423
          Size/MD5 checksum:    46506 3321b7e3436527a742a614460ad7fc13
          Size/MD5 checksum:   178710 5c42822842050f6018dfa9ed0caf21c1
          Size/MD5 checksum:   156736 1d4681ca3513c7ea2232df397bef255b
          Size/MD5 checksum:   179480 a46ecd57b8f1a41a57913b2cfdfd3b3a

  ia64 architecture (Intel ia64)

          Size/MD5 checksum:    70854 e6abbe00bd26b2b31b6e8927a4fac50f
          Size/MD5 checksum:    92206 5eb6ce7ab0ece4ab97a009f8ec511064
          Size/MD5 checksum:   256438 431f0c6855567c375e661c88946e19b0
          Size/MD5 checksum:   322478 ecf0439280e3f2542c87dfd8b303677f
          Size/MD5 checksum:    73892 4a83b247da9f035c2640413e2d6c18c5
          Size/MD5 checksum:   107816 bebee83e6694e40ed98114323b5eb476
          Size/MD5 checksum:   706118 b0c3afa67ed86a3888a37e27f9ce00bf
          Size/MD5 checksum:   322554 b6ecdc74cb75ec6e7748e7947778b911
          Size/MD5 checksum:   266762 274b89143d140df72d3b1c1d0e4f0151
          Size/MD5 checksum:   475256 2aa7339691e1453cab946a722a075a86

  m68k architecture (Motorola Mc680x0)

          Size/MD5 checksum:   146354 39df67e491623128aec5f8eb687c4ca1
          Size/MD5 checksum:    57204 4a3a3005de2f77695485ac7d8172741b
          Size/MD5 checksum:    70192 e7629713226bb1765ae436a94f3b4dc8
          Size/MD5 checksum:   145044 b5f5883829c1acfa9f1bc10cea9a667f
          Size/MD5 checksum:    44664 2dde5ea117bbd72502cdc965a9e6f1f8
          Size/MD5 checksum:   164260 ed7ef319c3e5e2a0c75994d6c8958352
          Size/MD5 checksum:   164520 0dd2647a50725e9d6760783cd302dfb4
          Size/MD5 checksum:   409162 171165fed1e5b36ebf4957633ecb22ef
          Size/MD5 checksum:   277472 13081c19067f7a17f56afc3f3b955cda
          Size/MD5 checksum:    44992 5d60536c6bb75c9ee954b07939784ad9

  mips architecture (MIPS (Big Endian))

          Size/MD5 checksum:   206874 af0b07b1b1d6aa4828aa9ed304e86abd
          Size/MD5 checksum:   191458 7515677f7b639a7c19c1ca1e815dabd8
          Size/MD5 checksum:   175520 e843139ab24f216dd8bcacfe4804a72e
          Size/MD5 checksum:    55206 c15bd9594fe03dce923f2324f7af4349
          Size/MD5 checksum:   308620 fb9aca45c0332a33ee5daaceb5d765b0
          Size/MD5 checksum:    66744 553f2d74cde8859cf6e0d1237347f1a8
          Size/MD5 checksum:   541382 21a13a02e856d52a6e307849025d1412
          Size/MD5 checksum:   209932 d6ff72cb3b1c2895ecf5b79cad38d990
          Size/MD5 checksum:    53648 237848a449f86964c8fbee33becd6cc9
          Size/MD5 checksum:    72452 3b67b8ba904b0c19984adfcfe2ebf355

  mipsel architecture (MIPS (Little Endian))

          Size/MD5 checksum:    67064 e81d7ebb16801d27c10e33b5a6dfbf35
          Size/MD5 checksum:   307300 c4cdccbcf0aec23eb91682eb208913e6
          Size/MD5 checksum:   177378 679e5cdb56b74562b83062a6619a1143
          Size/MD5 checksum:   211010 1344a0978e5a07333f99a139f07a21d0
          Size/MD5 checksum:    53838 d17b9d5734f2ced72ddb452284977dfd
          Size/MD5 checksum:    55078 119221640223a1c79f30a94f5e11294e
          Size/MD5 checksum:   213508 a58e6f97a82736249a4ab034eac5f086
          Size/MD5 checksum:   191122 391939f8e607fbcbfb69734b23dfe888
          Size/MD5 checksum:   540976 492cefb3640a80883bfe633ab342dd38
          Size/MD5 checksum:    72272 42671910c574fffd6cc168930b0920a8

  powerpc architecture (PowerPC)

          Size/MD5 checksum:    62874 208a330e234131b7bccd02511a211ad4
          Size/MD5 checksum:   303696 6784ebba9d38215f7239a86a1ffe3832
          Size/MD5 checksum:   162892 88d55edcb6cc8efa62c6d317dd1b51ca
          Size/MD5 checksum:    49516 7366d350910d3f787376c73c3f4b308d
          Size/MD5 checksum:   189698 dbc2a890d343039384a3b9c3b94cfd5c
          Size/MD5 checksum:   188618 920e7456ad6a63a236dda091a2a5877d
          Size/MD5 checksum:    74226 3985482de74d7d01a0a5c0a7d86e5be2
          Size/MD5 checksum:    49474 5a79df176b512a22f6f8798e8be67d7c
          Size/MD5 checksum:   164300 7c271ea098cabe4673a1940b991ea98a
          Size/MD5 checksum:   491084 48fe52a33909c9e84d5df3df832ce460

  s390 architecture (IBM S/390)

          Size/MD5 checksum:   189478 8328c0dd0a4b48f93182d16c578d5a6a
          Size/MD5 checksum:    67246 ccce6c735b77612b93c9492dffe280aa
          Size/MD5 checksum:   319800 33e21f4beeb4ec468cce9fea66b869cc
          Size/MD5 checksum:   164476 ca9e122121d5e7064d75e10661f9b6b6
          Size/MD5 checksum:   166610 cbdb3c20a92b077ebb25270e61ebc5b0
          Size/MD5 checksum:    76788 f92d6d6c97278151576508504d6f6871
          Size/MD5 checksum:    50408 063b686f9d0c7533e4f6eaf6b950cada
          Size/MD5 checksum:    50434 510bd38a07280309f0d7c2ce0555647c
          Size/MD5 checksum:   190810 c904daff01d4c48a3bd8fd150d3e1b89
          Size/MD5 checksum:   453650 a2730b0bddaee953f5dfbc961c9f083d

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5 checksum:   463168 0dedc859bdd7ab6306f10ebd44e95e22
          Size/MD5 checksum:   173190 b28677ee8c2a09e0dbc419e5befdf549
          Size/MD5 checksum:   184512 fd7a26631abd3e97b0441d9209979736
          Size/MD5 checksum:    49924 7f478a11996016b98618ce6a20c92a9f
          Size/MD5 checksum:   159702 7b2bee403efb894f5d2279d5656738ba
          Size/MD5 checksum:   301640 f17bdbb01d9df8b08fdd6804c9d881dc
          Size/MD5 checksum:    64542 693983c9bf0173af7b2369369d1362e9
          Size/MD5 checksum:    73562 99697c7fe296e84c7503a3ac91e98b99
          Size/MD5 checksum:   183600 6efce907c8eebb1d3a890ff094919bf9
          Size/MD5 checksum:    49914 556464474bd52abf7995534f0f16b80d

Debian 3.1 (sarge)
- ------------------  Source archives:

          Size/MD5 checksum:      782 da11a6168871f74929d30ec092b1da9c
          Size/MD5 checksum:   660240 e775434ffebb62c866a0803fa75e88e0

  Architecture independent packages:

          Size/MD5 checksum:   718250 a6b3db90775a52c0bdf9388ec6261048

  alpha architecture (DEC Alpha)

          Size/MD5 checksum:   246822 b523d89c2ba9efecbfd298c3ca40e512
          Size/MD5 checksum:    71698 df52b765824a8a44acca587fcd0af77e
          Size/MD5 checksum:   200588 ad625368cf5f1e92db1be48b2a141240
          Size/MD5 checksum:   861060 6e4fc9586f471f4929e76c94b67b5964
          Size/MD5 checksum:    89518 d4b6366a7c365bde92aa34663d6d9291
          Size/MD5 checksum:    62298 f3b151f5990ae54b4a2bc6865dcdc303
          Size/MD5 checksum:   422260 6c4ca4d0e2ee221882b6a293b06145e8
          Size/MD5 checksum:   113680 5df8dcc58913faf2948e4c2653db2b29
          Size/MD5 checksum:   145252 4cb670ffda210f75cace2767b94abc2f
          Size/MD5 checksum:   136778 70649da7b78490852e605db6ee73027d

  arm architecture

          Size/MD5 checksum:    92758 d46e37c35d8951abff114dc2f426396f
          Size/MD5 checksum:   192236 0df006460bc184c5967f1f3ca11f4628
          Size/MD5 checksum:    53010 24daf632b6460f71b2834267ebf70b0a
          Size/MD5 checksum:   114822 5667c4e72c1fc4c9e2890e507b0516d3
          Size/MD5 checksum:    74256 197167d6b853775ce2ebf5381abf545d
          Size/MD5 checksum:    57414 577089458e7931775aee87223d0f4008
          Size/MD5 checksum:   126918 53ff993991999a3226af36d30f42caf6
          Size/MD5 checksum:   633138 302b1b527b4402ab9e5be17242b49d68
          Size/MD5 checksum:   328506 c80a0a9cc5f15564bba30a4a5e677f7d

  hppa architecture (HP PA RISC)

          Size/MD5 checksum:    63544 7274d39473d0c059ee9196f0fbb85829
          Size/MD5 checksum:   383198 c1b1276f0bd7d2cfa9b2ca7621ac7f3a
          Size/MD5 checksum:   223408 ddb2262ac12dcc07261cad6fdbf86fe6
          Size/MD5 checksum:   668944 7790b8aae056cdca2f795fe2d094f3a3
          Size/MD5 checksum:   138444 ba0b5d7ebd4c2da5ce8888393c5c51c1
          Size/MD5 checksum:    58690 1a83ec9c0f90b30f32a55bd85095e960
          Size/MD5 checksum:   186550 f63594e91ba83030e34665b3dc33333d
          Size/MD5 checksum:   103810 b05f32be83ea6f21d1b440f3d9815e36
          Size/MD5 checksum:    81280 b8a494c41f61746d16a5ef360abbd7c4
          Size/MD5 checksum:   124420 cafdeb049987536c09ef8be3d021eb50

  i386 architecture (Intel ia32)

          Size/MD5 checksum:    52186 00356fdf1a8534d13942ad3d58426da5
          Size/MD5 checksum:   573872 06ee6f80509bda1f448e3151103daff8
          Size/MD5 checksum:   190830 f84abd310272a79bb97671e347bc7a90
          Size/MD5 checksum:   115466 ceff3bcdfc3160ebc6a3b02f01de4a87
          Size/MD5 checksum:    57014 04481e4c248ea66d59ac88bfb01c69c8
          Size/MD5 checksum:    94816 805ec4998e84a1956cbdb2953b3183ac
          Size/MD5 checksum:   164898 e6c21f2bc6b36a99d012a7c85bb5888b
          Size/MD5 checksum:   127316 4503fc5f44a24097ba377bf74642e56b
          Size/MD5 checksum:   348752 f888b737b0d365be80b592e963c3ae14
          Size/MD5 checksum:    75396 bbf799a4af8e92e4f05a3c7b40eae35a

  ia64 architecture (Intel ia64)

          Size/MD5 checksum:   164428 5e4a6d83e9a7a51f64346ef8b5cc9e14
          Size/MD5 checksum:   133154 e207307fd20142dfa58bfdad5a66b703
          Size/MD5 checksum:   166776 fa1e4a9cd6ec280f8ba4497fd0331c3f
          Size/MD5 checksum:   239580 dabb5d3c93e2e81be75568039540339a
          Size/MD5 checksum:    79248 5da389e996d41dbcb6d490f84479a90f
          Size/MD5 checksum:   288648 dcd3f4a635862a21d631a3c9d1b668ed
          Size/MD5 checksum:   501692 27ed673e33624d61a2313a0c1ef46cf6
          Size/MD5 checksum:   104572 8cc3ee2cd265036e2641611ea46abc1c
          Size/MD5 checksum:    72940 2527964df7d5e59b743cb119ce7ae90c
          Size/MD5 checksum:   889240 f6f1660e3085898e7f3cd056e0203c0a

  m68k architecture (Motorola Mc680x0)

          Size/MD5 checksum:   121452 97e215d21e1d2cb24d03e1f4ebe20b3a
          Size/MD5 checksum:   305168 2629762692a34e2492ae5aca58252f33
          Size/MD5 checksum:    70436 a18968476c9c251e764cc12c34865771
          Size/MD5 checksum:   106794 d4ac1a6b4f8d60a95602d49ea6f3f704
          Size/MD5 checksum:    87860 903bff079057ee299339ed4bc62f0d60
          Size/MD5 checksum:   147084 ae79c4e145f112b93d5c392393e079b6
          Size/MD5 checksum:    52748 452ea96796025a17cdc74da238e01f06
          Size/MD5 checksum:    49052 3fc6eef30212fd7b31e30ad99030571b
          Size/MD5 checksum:   515278 555e8642d5d52a5c67b89d0419b977e2
          Size/MD5 checksum:   173508 b88dcfe293aab38cc5e1d9acca4a8460

  mips architecture (MIPS (Big Endian))

          Size/MD5 checksum:    81124 59ced8205d293659074ef03267367ace
          Size/MD5 checksum:   354722 dd27f90f218101236bd35d7244cad3c3
          Size/MD5 checksum:   226132 1ebebe9d0cb8a9b0953976f8c07074fe
          Size/MD5 checksum:   679376 31e9c416f2af5dcb8feb9ba857d9cb83
          Size/MD5 checksum:    57452 131b7f5ad165c4cb2a2e78201b23a784
          Size/MD5 checksum:   163476 87292e883fd4c536f63b5b59fcb5498c
          Size/MD5 checksum:    64784 7b7d127f073a8a2dc7adefb47e9c711c
          Size/MD5 checksum:   146236 ffa1c4bcdd3871619e191e5d27d6ebac
          Size/MD5 checksum:   128648 adadfde444868efcc1307f2518cffdc4
          Size/MD5 checksum:   102670 813c6168220a1c989d598672ba2700ea

  mipsel architecture (MIPS (Little Endian))

          Size/MD5 checksum:    81356 d6c0866ee7f66a51e073e7485b509666
          Size/MD5 checksum:   129350 2886ad47b91937c136991cd741f311f0
          Size/MD5 checksum:    57442 9fe252aefab22732c9657a098067fc6e
          Size/MD5 checksum:   681984 ea291b54aa40d0a55568d36674b7c0eb
          Size/MD5 checksum:   164910 5510eaf9b76c9c94940ebb9e5f5eb33c
          Size/MD5 checksum:    64524 3ff1c88cfe25cf6f40654ebd5be933a2
          Size/MD5 checksum:   145980 edfc8eadf5531fb43c6ffafa1d844c43
          Size/MD5 checksum:   225846 75ca71d000a3657c4019212c35d9111e
          Size/MD5 checksum:   102906 7276c4ecc22eea0139deceb3ac101727
          Size/MD5 checksum:   354452 8f8158c45a10711ce67890c71651d3b0

  powerpc architecture (PowerPC)

          Size/MD5 checksum:    82000 f58fe267de1b0fc630b35af231e47c01
          Size/MD5 checksum:    56366 dad4efe57801436d3476079d7bd3438e
          Size/MD5 checksum:   352428 195cae3d096c8fe39115a2d9b60a18ac
          Size/MD5 checksum:   217060 03c65d717ebaac219b4908e842ef940f
          Size/MD5 checksum:   104444 dfc24bf1fa734b793b11d8d6a53151c5
          Size/MD5 checksum:   634188 335a30c147ae013565c1403a3c717750
          Size/MD5 checksum:   164962 b974bd1c9870660a3603dfbd0efd8731
          Size/MD5 checksum:   125498 3da7d6b0f452ed3bd965a40af1aa05d0
          Size/MD5 checksum:    60960 862e8a596c6b993a3ad8f97b88b5c7c9
          Size/MD5 checksum:   143090 cabfc4f5adb594329fc4a7a4e5adb776

  s390 architecture (IBM S/390)

          Size/MD5 checksum:   179612 274c272f1a233dfb2cc8a39f71cee1f7
          Size/MD5 checksum:   624260 1ae8c3521483c0bcf55ca7f6952572d1
          Size/MD5 checksum:   213478 82187d843a9be9ddb8d6b7da673d28a0
          Size/MD5 checksum:    56508 61ed5cfc1d935f6602a053bf7aef81ba
          Size/MD5 checksum:   132268 ffa0fa4707f7e61efd9e06e405fea8b1
          Size/MD5 checksum:    98560 5a044667aafd800c49636ef356331748
          Size/MD5 checksum:    62642 c6018c73aef5a42c391e73a70c16067e
          Size/MD5 checksum:   120554 a52f54e4cb58803f9c7f5840dc2f8ee6
          Size/MD5 checksum:   375518 4e927de27b9c199dad963ffe0983ecfd
          Size/MD5 checksum:    81688 fa25823b47cc780a7ef6cf2d482a2962

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5 checksum:   156992 4de30a5583e1087e91226fda3a8b7a2f
          Size/MD5 checksum:    72932 10462e84becec666be6b42933044672f
          Size/MD5 checksum:   126140 417a5afcf1d7d8f956353aaa8a581acc
          Size/MD5 checksum:    52850 c8aa898a957bc5d14cc8fac9a76eda45
          Size/MD5 checksum:    58204 145ae52c40c2e597f95b4efa08043ef4
          Size/MD5 checksum:   329756 ed390ffde7edaa710e82fd04dac0d2fb
          Size/MD5 checksum:   113300 73d58f6abd59c744040ff896c2ede81b
          Size/MD5 checksum:    92462 b077594d1145c454fcd51a9aa38363fb
          Size/MD5 checksum:   576036 a196c0399c1a9c9b206647ec67f2a628
          Size/MD5 checksum:   193852 3453f705b23dfec98b6481480b14352f

- -------------------------------------------------------------------------------For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp:  dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org