Mandriva Linux Security Advisory 2011-077

Mandriva Linux Security Advisory 2011-077 – The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted request that triggers an error condition. The updated packages have been patched to correct this issue.

Source: Mandriva Linux Security Advisory 2011-077