rhsa-2008_0164
Vulnerability from csaf_redhat
Published
2008-03-18 19:26
Modified
2024-11-22 01:51
Summary
Red Hat Security Advisory: krb5 security and bugfix update

Notes

Topic
Updated krb5 packages that resolve several issues and fix multiple bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team.
Details
Kerberos is a network authentication system which allows clients and servers to authenticate to each other through use of symmetric encryption and a trusted third party, the KDC. A flaw was found in the way the MIT Kerberos Authentication Service and Key Distribution Center server (krb5kdc) handled Kerberos v4 protocol packets. An unauthenticated remote attacker could use this flaw to crash the krb5kdc daemon, disclose portions of its memory, or possibly execute arbitrary code using malformed or truncated Kerberos v4 protocol requests. (CVE-2008-0062, CVE-2008-0063) This issue only affected krb5kdc with Kerberos v4 protocol compatibility enabled, which is the default setting on Red Hat Enterprise Linux 4. Kerberos v4 protocol support can be disabled by adding "v4_mode=none" (without the quotes) to the "[kdcdefaults]" section of /var/kerberos/krb5kdc/kdc.conf. Jeff Altman of Secure Endpoints discovered a flaw in the RPC library as used by MIT Kerberos kadmind server. An unauthenticated remote attacker could use this flaw to crash kadmind or possibly execute arbitrary code. This issue only affected systems with certain resource limits configured and did not affect systems using default resource limits used by Red Hat Enterprise Linux 5. (CVE-2008-0947) Red Hat would like to thank MIT for reporting these issues. Multiple memory management flaws were discovered in the GSSAPI library used by MIT Kerberos. These flaws could possibly result in use of already freed memory or an attempt to free already freed memory blocks (double-free flaw), possibly causing a crash or arbitrary code execution. (CVE-2007-5901, CVE-2007-5971) In addition to the security issues resolved above, the following bugs were also fixed: * delegated krb5 credentials were not properly stored when SPNEGO was the underlying mechanism during GSSAPI authentication. Consequently, applications attempting to copy delegated Kerberos 5 credentials into a credential cache received an "Invalid credential was supplied" message rather than a copy of the delegated credentials. With this update, SPNEGO credentials can be properly searched, allowing applications to copy delegated credentials as expected. * applications can initiate context acceptance (via gss_accept_sec_context) without passing a ret_flags value that would indicate that credentials were delegated. A delegated credential handle should have been returned in such instances. This updated package adds a temp_ret_flag that stores the credential status in the event no other ret_flags value is passed by an application calling gss_accept_sec_context. * kpasswd did not fallback to TCP on receipt of certain errors, or when a packet was too big for UDP. This update corrects this. * when the libkrb5 password-routine generated a set-password or change-password request, incorrect sequence numbers were generated for all requests subsequent to the first request. This caused password change requests to fail if the primary server was unavailable. This updated package corrects this by saving the sequence number value after the AP-REQ data is built and restoring this value before the request is generated. * when a user's password expired, kinit would not prompt that user to change the password, instead simply informing the user their password had expired. This update corrects this behavior: kinit now prompts for a new password to be set when a password has expired. All krb5 users are advised to upgrade to these updated packages, which contain backported fixes to address these vulnerabilities and fix these bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated krb5 packages that resolve several issues and fix multiple bugs are\nnow available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Kerberos is a network authentication system which allows clients and\nservers to authenticate to each other through use of symmetric encryption\nand a trusted third party, the KDC.\n\nA flaw was found in the way the MIT Kerberos Authentication Service and Key\nDistribution Center server (krb5kdc) handled Kerberos v4 protocol packets.\nAn unauthenticated remote attacker could use this flaw to crash the\nkrb5kdc daemon, disclose portions of its memory, or possibly execute\narbitrary code using malformed or truncated Kerberos v4 protocol requests.\n(CVE-2008-0062, CVE-2008-0063)\n\nThis issue only affected krb5kdc with Kerberos v4 protocol compatibility\nenabled, which is the default setting on Red Hat Enterprise Linux 4.\nKerberos v4 protocol support can be disabled by adding \"v4_mode=none\"\n(without the quotes) to the \"[kdcdefaults]\" section of\n/var/kerberos/krb5kdc/kdc.conf.\n\nJeff Altman of Secure Endpoints discovered a flaw in the RPC library as\nused by MIT Kerberos kadmind server. An unauthenticated remote attacker\ncould use this flaw to crash kadmind or possibly execute arbitrary code.\nThis issue only affected systems with certain resource limits configured\nand did not affect systems using default resource limits used by Red Hat\nEnterprise Linux 5. (CVE-2008-0947)\n\nRed Hat would like to thank MIT for reporting these issues.\n\nMultiple memory management flaws were discovered in the GSSAPI library used\nby MIT Kerberos. These flaws could possibly result in use of already freed\nmemory or an attempt to free already freed memory blocks (double-free\nflaw), possibly causing a crash or arbitrary code execution.\n(CVE-2007-5901, CVE-2007-5971)\n\nIn addition to the security issues resolved above, the following bugs were\nalso fixed:\n\n* delegated krb5 credentials were not properly stored when SPNEGO was the\nunderlying mechanism during GSSAPI authentication. Consequently,\napplications attempting to copy delegated Kerberos 5 credentials into a\ncredential cache received an \"Invalid credential was supplied\" message\nrather than a copy of the delegated credentials. With this update, SPNEGO\ncredentials can be properly searched, allowing applications to copy\ndelegated credentials as expected.\n\n* applications can initiate context acceptance (via gss_accept_sec_context)\nwithout passing a ret_flags value that would indicate that credentials were\ndelegated. A delegated credential handle should have been returned in such\ninstances. This updated package adds a temp_ret_flag that stores the\ncredential status in the event no other ret_flags value is passed by an\napplication calling gss_accept_sec_context.\n\n* kpasswd did not fallback to TCP on receipt of certain errors, or when a\npacket was too big for UDP. This update corrects this.\n\n* when the libkrb5 password-routine generated a set-password or\nchange-password request, incorrect sequence numbers were generated for all\nrequests subsequent to the first request. This caused password change\nrequests to fail if the primary server was unavailable. This updated\npackage corrects this by saving the sequence number value after the AP-REQ\ndata is built and restoring this value before the request is generated.\n\n* when a user\u0027s password expired, kinit would not prompt that user to\nchange the password, instead simply informing the user their password had\nexpired. This update corrects this behavior: kinit now prompts for a new\npassword to be set when a password has expired.\n\nAll krb5 users are advised to upgrade to these updated packages, which\ncontain backported fixes to address these vulnerabilities and fix these\nbugs.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0164",
        "url": "https://access.redhat.com/errata/RHSA-2008:0164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "415321",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
      },
      {
        "category": "external",
        "summary": "415351",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
      },
      {
        "category": "external",
        "summary": "432620",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
      },
      {
        "category": "external",
        "summary": "432621",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
      },
      {
        "category": "external",
        "summary": "433596",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
      },
      {
        "category": "external",
        "summary": "436460",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436460"
      },
      {
        "category": "external",
        "summary": "436465",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436465"
      },
      {
        "category": "external",
        "summary": "436467",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436467"
      },
      {
        "category": "external",
        "summary": "436468",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436468"
      },
      {
        "category": "external",
        "summary": "436470",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=436470"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0164.json"
      }
    ],
    "title": "Red Hat Security Advisory: krb5 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-22T01:51:57+00:00",
      "generator": {
        "date": "2024-11-22T01:51:57+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0164",
      "initial_release_date": "2008-03-18T19:26:00+00:00",
      "revision_history": [
        {
          "date": "2008-03-18T19:26:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-03-18T15:26:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T01:51:57+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-0:1.6.1-17.el5_1.1.src",
                "product": {
                  "name": "krb5-0:1.6.1-17.el5_1.1.src",
                  "product_id": "krb5-0:1.6.1-17.el5_1.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5@1.6.1-17.el5_1.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-server@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                "product": {
                  "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                  "product_id": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-workstation@1.6.1-17.el5_1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-libs@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-debuginfo@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                "product": {
                  "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                  "product_id": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/krb5-devel@1.6.1-17.el5_1.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-0:1.6.1-17.el5_1.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-0:1.6.1-17.el5_1.1.src"
        },
        "product_reference": "krb5-0:1.6.1-17.el5_1.1.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-server-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        },
        "product_reference": "krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-5901",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2007-11-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "415321"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.  NOTE: this might be the result of a typo in the source code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: use-after-free in gssapi lib",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5901\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5901"
        },
        {
          "category": "external",
          "summary": "RHBZ#415321",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415321"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5901",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5901"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5901"
        }
      ],
      "release_date": "2007-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "krb5: use-after-free in gssapi lib"
    },
    {
      "cve": "CVE-2007-5971",
      "discovery_date": "2007-11-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "415351"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: double free in gssapi lib",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5971\n\nThe Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw. See https://marc.info/?m=119743235325151",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "RHBZ#415351",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=415351"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-5971",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-5971"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-5971"
        }
      ],
      "release_date": "2007-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "krb5: double free in gssapi lib"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0062",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432620"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: uninitialized pointer use in krb5kdc",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "RHBZ#432620",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432620"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0062",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0062"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0062"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "krb5: uninitialized pointer use in krb5kdc"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        }
      ],
      "cve": "CVE-2008-0063",
      "discovery_date": "2008-02-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "432621"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka \"Uninitialized stack values.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: possible leak of sensitive data from krb5kdc using krb4 request",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "RHBZ#432621",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=432621"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0063",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0063"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0063"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: possible leak of sensitive data from krb5kdc using krb4 request"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "MIT"
          ]
        },
        {
          "names": [
            "Jeff Altman"
          ],
          "organization": "Secure Endpoints"
        }
      ],
      "cve": "CVE-2008-0947",
      "discovery_date": "2008-02-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "433596"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5: file descriptor array overflow in RPC library",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-0:1.6.1-17.el5_1.1.src",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-0:1.6.1-17.el5_1.1.src",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
          "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-0947"
        },
        {
          "category": "external",
          "summary": "RHBZ#433596",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=433596"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-0947",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-0947"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-0947"
        }
      ],
      "release_date": "2008-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-03-18T19:26:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "5Client-Workstation:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client-Workstation:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-0:1.6.1-17.el5_1.1.src",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Client:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-0:1.6.1-17.el5_1.1.src",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-debuginfo-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-devel-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.ppc64",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-libs-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-server-0:1.6.1-17.el5_1.1.x86_64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.i386",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ia64",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.ppc",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.s390x",
            "5Server:krb5-workstation-0:1.6.1-17.el5_1.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0164"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "krb5: file descriptor array overflow in RPC library"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.