Security Advisory
CVE-2008-0063
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."