CVE-2006-6144

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.

Date published : 2007-01-09

http://www.securityfocus.com/bid/21975

http://www.securityfocus.com/archive/1/456409/100/0/threaded