Referenced CVEs:
CVE-2009-3295


Description:
===========================================================Ubuntu Security Notice USN-879-1 January 06, 2010krb5 vulnerabilityCVE-2009-3295===========================================================A security issue affects the following Ubuntu releases:Ubuntu 9.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 9.10: krb5-kdc 1.7dfsg~beta3-1ubuntu0.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:Jeff Blaine, Radoslav Bodo, Jakob Haufe, and Jorgen Wahlsten discoveredthat the Kerberos Key Distribution Center service did not correctly verifycertain network traffic. An unauthenticated remote attacker could senda specially crafted request that would cause the KDC to crash, leadingto a denial of service.





More...