Jeffrey Altman 6dd3eb836b CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation ...

In _krb5_extract_ticket() the KDC-REP service name must be obtained from
encrypted version stored in 'enc_part' instead of the unencrypted version
stored in 'ticket'.  Use of the unecrypted version provides an
opportunity for successful server impersonation and other attacks.

Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.

Change-Id: I45ef61e8a46e0f6588d64b5bd572a24c7432547c

2017-07-10 16:51:25 -04:00

..

asn1

Fix Appveyor build: lib/asn1

2017-05-26 23:24:30 -04:00

base

base: fix error_cmp

2017-04-29 01:05:58 -04:00

com_err

Fix Appveyor build: lib/com_err

2017-05-26 23:24:30 -04:00

gssapi

Fix some krb5_storage_write() usages

2017-05-26 23:24:30 -04:00

hcrypto

use memset_s

2017-04-29 01:05:59 -04:00

hdb

Fix some krb5_storage_write() usages

2017-05-26 23:24:30 -04:00

heimdal

Add Windows CNG (BCrypt) support to HCrypto EVP API

2015-02-11 16:00:32 +11:00

hx509

Fix Appveyor build: lib/hx509

2017-05-26 23:24:30 -04:00

ipc

On hpux, pthread_cond_t is undefined when pthread is disabled

2017-03-09 14:11:19 -05:00

kadm5

Fix some krb5_storage_write() usages

2017-05-26 23:24:30 -04:00

kafs

Use secure_getenv() instead of issuid()

2017-04-17 18:02:30 -04:00

kdfs

Minor typo/grammar fixes

2017-03-10 15:47:43 -05:00

krb5

CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation

2017-07-10 16:51:25 -04:00

libedit

No sys/ttydefaults.h on CYGWIN

2017-01-03 14:52:24 -05:00

ntlm

use memset_s

2017-04-29 01:05:59 -04:00

otp

Prefer BDB3/4/5 to BDB1/2

2016-11-08 15:48:40 -05:00

roken

Fix typo in d999ac7

2017-05-29 00:49:58 -05:00

sl

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

sqlite

Update SQLite to 3.17.0

2017-03-19 18:55:51 -04:00

vers

Fix make dist missing files (#228)

2016-12-15 12:15:56 -06:00

wind

tests on Windows

2015-03-21 15:44:48 -04:00

Makefile.am

Fix --disable-afs-support disable lib/kafs

2016-08-04 18:51:23 -05:00

NTMakefile

Finish removal of lib/45

2016-12-15 12:23:09 -06:00