Candidate: CVE-2008-0947 References: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txt https://ubuntu.com/security/notices/USN-587-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0947 PublicDate: 2008-03-19 00:44:00 UTC Description: Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: kees CVSS: Patches_krb5: upstream_krb5: pending (1.6.4) dapper_krb5: released (1.4.3-5ubuntu0.7) edgy_krb5: released (1.4.3-9ubuntu1.6) feisty_krb5: released (1.4.4-5ubuntu3.4) gutsy_krb5: released (1.6.dfsg.1-7ubuntu0.1) devel_krb5: released (1.6.dfsg.3~beta1-2ubuntu1)