A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm.
If file(1) is run over a specially constructed ELF file, an exploitablestack overflow occurs and attackers can gain the privileges of the userrunning file(1).
To browse through our weekly Linux Advisory Watch newsletters,