Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Sep 2022 18:41:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 266719] telnetd crashes if it receives IAC EC at session start
Message-ID:  <bug-266719-227-vrmmcNOdlw@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-266719-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-266719-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D266719

--- Comment #2 from Robert Morris <rtm@lcs.mit.edu> ---
Also, if the telnet client sends an authentication name, then a
KRB_FORWARD in an AUTHENTICATE sub-option for Kerberos5 but not
preceded by a KRB_AUTH, the "ticket" global variable is never
initialized, and there's a crash on this line in the server's
libtelnet/kerberos5.c in kerberos5_is()'s "case KRB_FORWARD":

        ret =3D krb5_cc_initialize (context,
                                  ccache,
                                  ticket->client);

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-266719-227-vrmmcNOdlw>