oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
38c797e1ae9b9c8f99ae4aa2e73957679031fd2b
heimdal/lib
History
Luke Howard 38c797e1ae krb5: always confirm PA-PKINIT-KX for anon PKINIT 
RFC8062 Section 7 requires verification of the PA-PKINIT-KX key excahnge
when anonymous PKINIT is used.  Failure to do so can permit an active
attacker to become a man-in-the-middle.

Introduced by a1ef548600.  First tagged
release Heimdal 1.4.0.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N (4.8)

Change-Id: I6cc1c0c24985936468af08693839ac6c3edda133
Signed-off-by: Jeffrey Altman <jaltman@auristor.com>
Approved-by: Jeffrey Altman <jaltman@auritor.com>
2019-05-14 15:52:24 -04:00
..
asn1
ASN.1 compiler: check write errors
2019-01-15 13:21:25 -06:00
base
krb5: port MIT Linux keyring credentials cache (#166)
2018-12-24 18:17:32 +11:00
com_err
lex: %option not supported by solaris lex
2018-12-18 13:12:46 -06:00
gssapi
lib/gssapi/mech: gss_acquire_cred_from calling conventions
2019-01-14 06:12:36 -05:00
hcrypto
always load plugins with RTLD_LOCAL/RTLD_GROUP if available
2019-01-03 20:06:27 -06:00
hdb
WIN32: fix calling conventions for 32-bit builds
2019-01-14 06:12:36 -05:00
heimdal
Add Windows CNG (BCrypt) support to HCrypto EVP API
2015-02-11 16:00:32 +11:00
hx509
Fixes https://github.com/heimdal/heimdal/issues/533
2019-03-22 20:59:04 -04:00
ipc
Fix warning in lib/ipc/tc.c
2018-12-28 01:09:38 -06:00
kadm5
lib/kadm5: WIN32 fix callback calling conventions
2019-01-14 06:12:36 -05:00
kafs
Use secure_getenv() instead of issuid()
2017-04-17 18:02:30 -04:00
kdfs
Minor typo/grammar fixes
2017-03-10 15:47:43 -05:00
krb5
krb5: always confirm PA-PKINIT-KX for anon PKINIT
2019-05-14 15:52:24 -04:00
libedit
AC_FIND_FUNC_NO_LIBS should check libtinfo for tgetent
2018-12-24 02:24:22 +00:00
ntlm
Fixed incorrect NTLM version. It was 00 earlier,
2018-12-25 10:54:35 -05:00
otp
Prefer BDB3/4/5 to BDB1/2
2016-11-08 15:48:40 -05:00
roken
roken: getuserinfo WIN32 fix username string termination
2019-05-02 13:42:01 -04:00
sl
Fix warning in sl compiler output
2019-01-02 13:56:04 -05:00
sqlite
Update SQLite to 3.17.0
2017-03-19 18:55:51 -04:00
vers
Fix make dist missing files (#228)
2016-12-15 12:15:56 -06:00
wind
lib/wind: get-punycode-examples.py whitespace fix
2019-01-02 10:23:39 -06:00
Makefile.am
Fix --disable-afs-support disable lib/kafs
2016-08-04 18:51:23 -05:00
NTMakefile
Finish removal of lib/45
2016-12-15 12:23:09 -06:00