CVE ID:	CVE-2008-0948
Description:	Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0948 BugTraq ID: 28302 http://www.securityfocus.com/bid/28302 Bugtraq: 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc (Google Search) http://www.securityfocus.com/archive/1/489762/100/0/threaded Bugtraq: 20080318 MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject) (Google Search) http://www.securityfocus.com/archive/1/489784/100/0/threaded Bugtraq: 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues (Google Search) http://www.securityfocus.com/archive/1/493080/100/0/threaded Cert/CC Advisory: TA08-079B http://www.us-cert.gov/cas/techalerts/TA08-079B.html CERT/CC vulnerability note: VU#374121 http://www.kb.cert.org/vuls/id/374121 HPdes Security Advisory: HPSBOV02682 http://marc.info/?l=bugtraq&m=130497213107107&w=2 HPdes Security Advisory: SSRT100495 http://marc.info/?l=bugtraq&m=130497213107107&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9209 RedHat Security Advisories: RHSA-2008:0181 http://www.redhat.com/support/errata/RHSA-2008-0181.html http://www.securitytracker.com/id?1019631 http://secunia.com/advisories/29423 http://secunia.com/advisories/29424 http://secunia.com/advisories/29428 http://secunia.com/advisories/29663 http://secunia.com/advisories/30535 http://securityreason.com/securityalert/3752 SuSE Security Announcement: SUSE-SA:2008:016 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html http://www.vupen.com/english/advisories/2008/0922/references http://www.vupen.com/english/advisories/2008/1102/references http://www.vupen.com/english/advisories/2008/1744 XForce ISS Database: krb5-rpclibrary-fdsetsize-bo(41274) https://exchange.xforce.ibmcloud.com/vulnerabilities/41274