Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x | Apple | 10.5.2 (including) | 10.5.2 (including) |
| Mac_os_x_server | Apple | 10.4.11 (including) | 10.4.11 (including) |
| Mac_os_x_server | Apple | 10.5.2 (including) | 10.5.2 (including) |
| Krb5 | Ubuntu | edgy | * |
| Krb5 | Ubuntu | feisty | * |
| Krb5 | Ubuntu | gutsy | * |
| Krb5 | Ubuntu | hardy | * |
| Krb5 | Ubuntu | jaunty | * |
| Krb5 | Ubuntu | upstream | * |
| Red Hat Enterprise Linux 5 | RedHat | krb5-0:1.6.1-17.el5_1.1 | * |