[6732] in Kerberos
Re: Kerberos Weakness (COAST Findings)
daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Thu Feb 22 14:24:45 1996
To: kerberos@MIT.EDU
Date: 22 Feb 1996 14:00:50 -0500
From: tytso@dcl.mit.edu (Theodore Y. Ts'o)
In article <Dn2qsH.Du9.0.staffin.dcs.ed.ac.uk@dcs.ed.ac.uk> gdmr@dcs.ed.ac.uk (George Ross) writes:
>Do the various "bones" versions have the problem? If so, are fixes available
>and how do we get them?
The bug was in the portion of the Kerberos sources which would have been
stripped out by the "Bones" distribution made at MIT. I haven't
personally had a chance to take a look at the "eBones" distribution,
which had the encryption calls added back outside of the US of A,
to see if it also has similar problems.
- Ted
