MIT has reported another flaw to us, CVE-2007-2798:
    The MIT krb5 Kerberos administration daemon (kadmind) is vulnerable to
    a stack buffer overflow.

The kadmind code which performs the principal renaming operation
passes unchecked string arguments to a sprintf() call which has a
fixed-size stack buffer as its destination. These strings are the old
and new principal names passed to the rename operation. The attacker
needs to authenticate to kadmind to perform this attack, but no
administrative privileges are required because the vulnerable code
executes prior to privilege verification.