[22347] in Kerberos
Re: MITKRB5-SA-2004-002: double-free vulnerabilities
daemon@ATHENA.MIT.EDU (Chaskiel M Grundman)
Wed Sep 1 15:10:49 2004
Date: Wed, 01 Sep 2004 15:00:08 -0400
From: Chaskiel M Grundman <cg2v@andrew.cmu.edu>
To: mikef@ack.berkeley.edu, kerberos@mit.edu
Message-ID: <7F8BB89A8EC3856300E4746F@sphinx.andrew.cmu.edu>
In-Reply-To: <Pine.GSO.4.58.0409011002450.27963@ack.Berkeley.EDU>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============98977772728633062=="
Errors-To: kerberos-bounces@mit.edu
--===============98977772728633062==
Content-Type: multipart/signed; micalg=sha1;
protocol="application/pkcs7-signature";
boundary="==========9D78275E14ED34166D94=========="
--==========9D78275E14ED34166D94==========
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--On Wednesday, September 01, 2004 17:25:59 +0000 Mike Friedman
<mikef@ack.Berkeley.EDU> wrote:
> I have no trouble verifying the asn1 (MITKRB5-SA-2004-003) patch with PGP.
> Why can't I get -002 to verify?
>
> Any other ideas? I'm doing this on Solaris 8, using PGP 6.5.8.
It appears as though pgp 6 does not properly implement "canonical text"
signatures (or the rfc2440 behavior is intentionally different from that of
pgp6...) 2440 says:
0x01: Signature of a canonical text document.
Typically, this means the signer owns it, created it, or
certifies that it has not been modified. The signature is
calculated over the text data with its line endings converted
to <CR><LF> and trailing blanks removed.
It appears that gnupg removes trailing blanks from every line, and pgp6
does not. The following scriptlet will convert one of these patch files
into a form that pgp 6.5.8/linux is able to verify for me:
perl -ne 'chomp;s/\s+$//;print $_,"\n"' IN.txt > OUT.txt
IN.txt.asc should be able to verify the text in OUT.txt. Note that OUT.txt
will not be valid input to patch, you need to use IN.txt. Also note that
IN.txt and OUT.txt should compare cleanly with gdiff -b.
--==========9D78275E14ED34166D94==========
Content-Type: application/pkcs7-signature
Content-Transfer-Encoding: base64
MIIOmAYJKoZIhvcNAQcCoIIOiTCCDoUCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3
DQEHAaCCDAQwggS/MIICp6ADAgECAgMAnckwDQYJKoZIhvcNAQEEBQAweTEQMA4G
A1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIw
IAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkB
FhJzdXBwb3J0QGNhY2VydC5vcmcwHhcNMDQwNzEzMDEzODAyWhcNMDUwNzEzMDEz
ODAyWjA/MRkwFwYDVQQDExBDQWNlcnQgVXNlciBDZXJ0MSIwIAYJKoZIhvcNAQkB
FhNjZzJ2QGFuZHJldy5jbXUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoMPgwO7Y4nAhlbGEhCjKauDlj1wtQVIR/wHuCChDzSJMy0HVD73pIpUf
PYcsGGnr3qScinkGtdFICULOtNGRJLDgFizaxHhkaJhzNKL6NaNpu3TV34NcYc1F
vz6xlppMYzt9DDHxgq0lSiZr4PWfW/9xEZMPh4NnAa7v8l3eaP5wmDsQxrmjNsrv
+jA0vYqXa0XeCO2r/28+is6i3NpH3+R+ocuVekyZwuHh1SHr4EnCEP2xW7rBimf9
3WdrZh7RD9XuQQn4AQMyTvYiO1PkX7MgNy9dNMcxf/82oMC25MMrrLoiLXT9ZPZC
Me2nrAfd0q4K2d1fVlhqen23DqlieQIDAQABo4GJMIGGMAwGA1UdEwEB/wQCMAAw
VgYJYIZIAYb4QgENBEkWR1RvIGdldCB5b3VyIG93biBjZXJ0aWZpY2F0ZSBmb3Ig
RlJFRSBoZWFkIG92ZXIgdG8gaHR0cDovL3d3dy5jYWNlcnQub3JnMB4GA1UdEQQX
MBWBE2NnMnZAYW5kcmV3LmNtdS5lZHUwDQYJKoZIhvcNAQEEBQADggIBAJIhmtfY
37R31BfGtRwZE87WYUKNi34eLVRrxJoEGs0FDKfs9mPCYgPjttVvsp/7iFWxC5Ar
YFVqB0TIm0iBZPrBUrC6hkOksuPcxXvwJuP+vHHX5oejMDAH34eGvx5XA8FtiDOr
/nRJI9ObGeohkpF6zdcFtPdiZeIhqfKxMnnvKTUfkAVL2wdy+GO42czSKECjWxDP
Q+M3Q5hoiH8Dfmm7ugo6sWetntvLHLjYMQUugLTN8a72jGZx1WyRuUgPK2Hk6d1L
TVV7rMR+osK/85KpJXtr1H38MITdqCrS3HVGakdkqyT83CuxVYDvywugsNKUSWxM
2EKuoji6av+/nwiKroTsbXV22duaYrZifcVFRsVEx3wE4x6/aeGhMdBuckzBK6o7
3qe/zhYor/2G3p6nKrZUI2bVFfTY3UvSRig/Z6j5cc+AmN9w4OiFjdxMKXd8y9Os
4t7ZmsFAzOfss5XMJ3s7SGkPuxZW74yQy29eaZRLcmZ3iLbzTL/4GSOeZIZ7Z+AM
eMcnUvtlFQ0Z+8weLQUd5BhYtPY4eMh3jUcJiNc9/VJ+kItG3P3/doUopb03sAfI
6giCPyLBw/U3+ejqbIDdJoBT1iTPDwICuHsP6dckZOlJOV6NL9S8J9xhCC04duAl
Mr9lwWHO0jLdROgo8B+rNHnGuQV0Oeo0T+Z4MIIHPTCCBSWgAwIBAgIBADANBgkq
hkiG9w0BAQQFADB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQLExVodHRwOi8v
d3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3Jp
dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0wMzAzMzAx
MjI5NDlaFw0zMzAzMjkxMjI5NDlaMHkxEDAOBgNVBAoTB1Jvb3QgQ0ExHjAcBgNV
BAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZQ0EgQ2VydCBTaWdu
aW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9ydEBjYWNlcnQub3Jn
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAziLA4kZ97DYoB1CW8qAz
QIxL8TtmPzHlawI229Z89vGIj053NgVBlfkJ8BLPRoZzYLdufujAWGSuzbCtRRcM
Y/pnCujW0r8+55jE8Ez64AO7NV1sId6eINm6zWYyN3L69wj1x81YyY7nDl7qPv4c
oRQKFWyGhFtkZip6qUtTefWIonvuLwphK42yfk1WpRPs6tqSnqxEQR5YYGUFZvjA
RL3LlPdCfgv3ZWiYUQXw8wWRBB0bF4LsyFe7w2t6iPGwcswlWyCR7BYCEo8y6RcY
SNDHBS4CMEK4JZwFaz+qOqfrU0j36NK2B5jcG8Y0f3/JHIJ6BVgrCFvzOKKrF11m
yZjXnhCLotLddJr3cQxyYN/Nb5gznZY0dj4kepKwDpUeb+agRThHqtdB7Uq3EvbX
G4OKDy7YCbZZ16oE/9KTfWgu3YtLq1i6L43qlaegw1SJpfvbi1EinbLDvhG+LJGG
i5Z4rSDTii8aP8bQUWWHIbEZAWV/RRyH9XzQQUxPKZgh/TMfdQwEUfoZd9vUFBzu
gcMd9Zi3aQaRIt0AUMyBMawSB3s42mhb5ivUfslfrejrckzzAeVLIL+aplfKkQAB
i6F1ITe1Yw1nPkZPcCBnzsXWWdsC4PDSy826YreQQejdIOQpvGQpQsgi3Hia/0Ps
mBsJUUtaWsJx8cTLc6nloQsCAwEAAaOCAc4wggHKMB0GA1UdDgQWBBQWtTIb1Mfz
4OaO873SsDrusjkY0TCBowYDVR0jBIGbMIGYgBQWtTIb1Mfz4OaO873SsDrusjkY
0aF9pHsweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5j
YWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEw
HwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmeCAQAwDwYDVR0TAQH/BAUw
AwEB/zAyBgNVHR8EKzApMCegJaAjhiFodHRwczovL3d3dy5jYWNlcnQub3JnL3Jl
dm9rZS5jcmwwMAYJYIZIAYb4QgEEBCMWIWh0dHBzOi8vd3d3LmNhY2VydC5vcmcv
cmV2b2tlLmNybDA0BglghkgBhvhCAQgEJxYlaHR0cDovL3d3dy5jYWNlcnQub3Jn
L2luZGV4LnBocD9pZD0xMDBWBglghkgBhvhCAQ0ESRZHVG8gZ2V0IHlvdXIgb3du
IGNlcnRpZmljYXRlIGZvciBGUkVFIGhlYWQgb3ZlciB0byBodHRwOi8vd3d3LmNh
Y2VydC5vcmcwDQYJKoZIhvcNAQEEBQADggIBACjH7pyCArpcgBLKNQodgW+JapnM
8mgPf6fhjViVPr3yBsOQWqy1YPaZQwGjiHCcnWKdpIevZ1gNMDY75q1I08t0AoZx
PuIrA2jxNGJARjtT6ij0rPtmlVOKTV39O9lg18p5aTuxZZKmxoGCXJzN600BiqXf
EVWqFcofN8CCmHBh22p8lqOOLlQ+TyGpkO/cgr/c6EWtTZBzCDyUZbAEmXZ/4rzC
ahWqlwQ3JNgelE5tDlG+1sSPypZt90Pf6DBlJzt7u0NDY8RD97LsaMzhGY4i+5jh
e1o+ATc7iwiwovOVThrLm82asduycPAtStvYsONvRUgzEv/+PDIqVPfE94rwiCPC
R/5kenHA0R6mY7AHfqQv0wGP3J8rtsYIqQ+TSCX8Ev2fQtzzxD72V7DX3WnRBnc0
CkvSyqD/HMaMyRa+xMwyN2hzXwj7UfdJUzYFCpUCTPJ5GhD22Dp1nPMd8aINcGeG
G7MW9S/lpOt5hvk9C8JzC6WZrG/8Z7jlLwumGCSNe9FINSkYQKyTYOGWhlC0elnY
jyELn8+CkcY7v2vcB5G5l1YjqrZslMZIBjzkzk6q5PYvCdxTby78dOs6Y5nCpqyJ
vKeyRKANihDjbPIky/qbn3BHLt4Ui9SyIAmWomTxJBzcoTWcFbLUvFUufQb1nA5V
9FrWk9p2rSVzTMVDMYICXDCCAlgCAQEwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEe
MBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0
IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2Vy
dC5vcmcCAwCdyTAJBgUrDgMCGgUAoIGxMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B
BwEwHAYJKoZIhvcNAQkFMQ8XDTA0MDkwMTE5MDAxMVowIwYJKoZIhvcNAQkEMRYE
FMx23xELGGBMtYxB8LO9PIFWBD1nMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcN
AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqG
SIb3DQMCAgEoMA0GCSqGSIb3DQEBAQUABIIBAJnVTJqQ4zQKkdO+stL/ILgxkzOh
8pbaFL3IxhyGfddRaVZ0ey+Z0g4/+GuLCnJrpS7nfB+Kw3VY6LtRMaby6y45D1Dp
9veMQgmy675zgAM4Ya3zExX1D0RqnZ4b6BFeDwEroBn0lMI+EX3k2jRpyTuSbZX5
AmPPvOstaVY6uA2xZy3+bDAoGWBGe0o1s38eiOClAiJf6b4tP+2KFgYBAO8wrVBg
RrqLOlSeF6BAzxfc4qpCspaZAT8NlLH8seFpgtPEcto+EAO3gP4Kc6Pv/Gm2Z+gU
rPj965NV5yPE9HKp/tXzar/LmE29ACF0jDk0V3ewcHUJCSMSALMX/etPnGA=
--==========9D78275E14ED34166D94==========--
--===============98977772728633062==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============98977772728633062==--
