Bug 234645 - Kerberos information leak
Summary: Kerberos information leak
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 3
Classification: Red Hat
Component: openssh
Version: 3.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Jan F. Chadima
QA Contact: Brian Brock
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-03-30 19:10 UTC by Miloslav Trmač
Modified: 2009-06-24 09:34 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-06-24 09:34:56 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Miloslav Trmač 2007-03-30 19:10:52 UTC
+++ This bug was initially created as a clone of Bug #234643 +++

From the openssh-4.3 changelog:
* Fix timing variance for valid vs. invalid accounts when attempting
  Kerberos authentication (Bugzilla #975)


Note You need to log in before you can comment on or make changes to this bug.