[Heimdal-source-changes] [heimdal/heimdal] 4a2009: CVE-2017-11103: Orpheus' Lyre KDC-REP service name...

[GitHub]

  Branch: refs/heads/heimdal-7-1-branch
  Home:   https://github.com/heimdal/heimdal
  Commit: 4a2009f6eded93e021534db7ab22f97caf4a74bd
      https://github.com/heimdal/heimdal/commit/4a2009f6eded93e021534db7ab22f97caf4a74bd
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2017-07-11 (Tue, 11 Jul 2017)

  Changed paths:
    M lib/krb5/ticket.c

  Log Message:
  -----------
  CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation

In _krb5_extract_ticket() the KDC-REP service name must be obtained from
encrypted version stored in 'enc_part' instead of the unencrypted version
stored in 'ticket'.  Use of the unecrypted version provides an
opportunity for successful server impersonation and other attacks.

Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.

Change-Id: I45ef61e8a46e0f6588d64b5bd572a24c7432547c


  Commit: 9808f83e1e4ad5f3b7740547c994f9e948f704a3
      https://github.com/heimdal/heimdal/commit/9808f83e1e4ad5f3b7740547c994f9e948f704a3
  Author: Nicolas Williams <nico at cryptonector.com>
  Date:   2017-07-11 (Tue, 11 Jul 2017)

  Changed paths:
    M configure.ac
    M windows/NTMakefile.version

  Log Message:
  -----------
  Bump version to 7.4


Compare: https://github.com/heimdal/heimdal/compare/76347f849d64...9808f83e1e4a