[4022] in Kerberos-V5-bugs
[krbdev.mit.edu #1385] VU#623217 VU#442569: krb4 insecure
daemon@ATHENA.MIT.EDU (Sam Hartman via RT)
Sun Mar 16 19:56:51 2003
Date: Sun, 16 Mar 2003 19:56:43 -0500 (EST)
Message-Id: <rt-1385-5471.0.292757367523819@krbdev.mit.edu>
In-Reply-To: <rt-1385@krbdev.mit.edu>
From: "Sam Hartman via RT" <rt-comment@krbdev.mit.edu>
To: krb5-prs@mit.edu
Reply-To: rt-comment@krbdev.mit.edu
Errors-To: krb5-bugs-bounces@mit.edu
Kerberos v4 cross-realm has cryptographic weaknesses. There are also
weaknesses in the 3DES krb4 support MIT introduced.
This is a tracking bug for the fixes to this.
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
http://mailman.mit.edu/mailman/listinfo/krb5-bugs
