Sorcerer alert SORCERER2002-10-27 (krb5)

From:
    	     
 
ask33@linuxmountain.org
To:
    	     
 
bugtraq@securityfocus.com
Subject:
    	     
 
KRB5-SORCERER2002-10-27 Security Update
Date:
    	     
 
Sun, 27 Oct 2002 17:38:19 -0600




                    Sorcerer Update Advisory
		    
________________________________________________________________________

Spell Name: 		krb5
Advisory ID:            SORCERER2002-10-27
Date:                   October 27th, 2002
________________________________________________________________________

Problem Description: 
	Kadmind daemon has a remote root exploit if compiled with 
        support for Kerebros 4 kadmin protocol. 

Update:
	Patched source code for krb5 spell.  You can get updated spells by doing an 
	augur synch
	augur update
Or if you are holding on some updates
	augur synch 
	cast krb5
Please upgrade as soon as possible. 

________________________________________________________________________

Updated Sources:

krb5-1.2.6
2002-002-kadm4_patch.txt