NetBSD Security Advisory 2003-006
		 =================================

$B%H%T%C%/(B:	Kerberos v4 $B%W%m%H%3%k$K$*$1$k0E9f$N<eE@(B
		(Cryptographic weaknesses in Kerberos v4 protocol)


$B%P!<%8%g%s(B:	NetBSD-current:	2003 $BG/(B 3 $B7n(B 20 $BF|$h$jA0$N%=!<%9(B
		NetBSD 1.6:	$B1F6A$"$j(B
		NetBSD-1.5.3:	$B1F6A$"$j(B
		NetBSD-1.5.2:	$B1F6A$"$j(B
		NetBSD-1.5.1:	$B1F6A$"$j(B
		NetBSD-1.5:	$B1F6A$"$j(B
		pkgsrc:		kth-krb4-1.2.1 $B$h$jA0$N$b$N$*$h$S!"(B
				heimdal-0.5.1 $B$h$jA0$N$b$N$O1F6A$"$j(B

$B1F6AHO0O(B:	Kerberos 4 $B%M%C%H%o!<%/$N$9$Y$F$N%f!<%6!<$N8"8B$,(B
		$BIT@5$K;HMQ$5$l$k2DG=@-$,$"$k!#(B
		(Every user on a Kerberos 4 network can be compromised)

$B=$@5F|(B:		NetBSD-current:		2003 $BG/(B 3 $B7n(B 20 $BF|(B
		NetBSD-1.6 branch:	2003 $BG/(B 3 $B7n(B 22 $BF|(B (1.6.1 $B$O=$@5$:$_(B)
		NetBSD-1.5 branch:	2003 $BG/(B 4 $B7n(B 1 $BF|(B
		pkgsrc:			kth-krb4-1.2.2 $B$*$h$S!"(B
					heimdal-0.5.2 $B$G=$@5!#(B


$B35MW(B - Abstract
===============

Kerberos $B%W%m%H%3%k$N%P!<%8%g%s(B 4 $B$N0E9f$K$O!"A*BrJ?J8967b(B
(chosen-plaintext attack) $B$K$h$C$F!"967b<T$,%l%k%`(B (realm) $B$K(B
$B$"$k$9$Y$F$N%W%j%s%7%Q%k(B (principal) $B$K$J$j$9$^$9$3$H$,$G$-$k$H$$$&<eE@$,(B
$BB8:_$7$^$9!#$3$N967b$rMxMQ$9$k$H!"$=$N%5%$%H$N(B Kerberos
$BG'>Z%7%9%F%`$N5!G=$r40A4$KL5NO2=$9$k$3$H$,2DG=$G$9!#(B

Kerberos $B%P!<%8%g%s(B 5 $B$K$O!"$3$N0E9f$N<eE@$O4^$^$l$F$$$^$;$s!#(B

Kerberos $B%P!<%8%g%s(B 4 $B$N5!G=$r40A4$KL58z$K$7$F$$$k%5%$%H$K$O!"(B
$B1F6A$O$"$j$^$;$s!#(BKerberos $B%P!<%8%g%s(B 4 $B$N5!G=$H$O!"(Bkrb5 $B$K$*$1$k(B
krb4 $B8_495!G=$J$I$b4^$^$l$^$9!#(B


$B5;=QE*$J>\:Y(B - Technical Details
================================

$B967b<T$O(B krb4 $B6&M-%/%m%9%l%k%`80$r;H$$!"%j%b!<%H$N%l%k%`$KB8:_$9$k(B
$B$"$i$f$k%5!<%S%9$KBP$9$k$9$Y$F$N%W%j%s%7%Q%k$r:>>N$9$k$3$H$,2DG=$G$9!#(B
$B$3$l$K$h$j(B KDC $B$N(B root $B8"8B$,IT@5;HMQ$5$l$k$@$1$G$J$/!"(B
$B$=$N(B KDC $B$,Ds6!$7$F$$$kG'>Z5!G=$K0MB8$9$k!"$9$Y$F$N%[%9%H$,IT@5$K(B
$B;HMQ$5$l$k2DG=@-$,$"$j$^$9!#(B

$B$3$N967b$O%/%m%9%l%k%`%W%j%s%7%Q%k$KBP$7$F<B9T$5$l$k2DG=@-$b$"$j$^$9!#(B
$B$D$^$j!"967b<T$OJ#?t$N%l%k%`4V$r7PM3$9$k$3$H$,$G$-!"967b<T$N(B
$B%m!<%+%k%l%k%`$H%/%m%9%l%k%`80$r6&M-$9$k!"$9$Y$F$N%l%k%`$,(B
$B967b$N6<0R$K$5$i$5$l$k$H$$$&$3$H$G$9!#(B

$B$^$?!"<B8=$O$+$J$j:$Fq$G$9$,!"6&M-%/%m%9%l%k%`80$rMxMQ$7$J$$967b$b(B
$B9M$($i$l$^$9!#967b<T$+$i$O>/$J$/$H$b!"967bBP>]$N%l%k%`$KB8:_$9$k(B
$BG$0U$N%W%j%s%7%Q%kL>$KBP$9$k967b$r9T$J$&$3$H$,2DG=$G$9!#(B

$B$"$kL$H/I=$NO@J8$K$O!"(Bkrb4 $B%W%m%H%3%k$K>\$7$$967b<T$G$"$l$P!"(B
$B0-MQJ}K!$r<BAu$9$k$3$H$,4JC1$K$G$-$kDxEY$K!"$3$N<eE@$N>\:Y$,(B
$B=q$+$l$F$$$^$9!#$?$@$7!"$3$N4+9p$N8x3+;~E@$G$O!"$^$@6qBNE*$J(B
$B0-MQJ}K!$O9-$/CN$i$l$F$$$^$;$s!#(B

$B$3$l$i$O!V%W%m%H%3%k>e$N!W<eE@$G$9!#=$@5$r9T$J$&$H!"K\Mh$N(B
$B%W%m%H%3%k$,;}$C$F$$$k5!G=$K0lDj$N@)8B$,2C$o$j$^$9!#(B

$B=$@5$O(B KDC $B$H$J$C$F$$$k%^%7%s$G9T$J$&I,MW$,$"$j$^$9!#%5!<%P!<>e$G(B
$B%P!<%8%g%s(B 4 $B$N5!G=$,L58z$K$J$C$F$$$l$P!"%/%i%$%"%s%HB&$K(B
$B=$@5%Q%C%A$rE,MQ$9$kI,MW$O$"$j$^$;$s!#(B


$B2sHrJ}K!$H2r7h:v(B - Solutions and Workarounds
============================================

$B?7$7$$%P!<%8%g%s$K%"%C%W%0%l!<%I$9$k$3$H$,$G$-$J$1$l$P!"(B
$B%/%m%9%l%k%`5!G=$r$9$Y$FL58z$K$7!"%/%m%9%l%k%`80$r:o=|$9$k$+%i%s%@%`2=(B
$B$7$F$/$@$5$$!#(B

``kinit --version'' $B$r<B9T$9$k$H!"%7%9%F%`$K<eE@$,B8:_$9$k$+$I$&$+(B
$BD4$Y$k$3$H$,$G$-$^$9!#(B

current:

	kinit (Heimdal 0.5nb2, KTH-KRB 1.2)
	Copyright (c) 1999-2002 Kungliga Tekniska H$Bvg(Bskolan
	Send bug-reports to heimdal-bugs@pdc.kth.se

	$B$HI=<($5$l$F$$$l$P!":#2s$NLdBj$O$"$j$^$;$s!#(B

$B<!$K<($9<j=g$O!"%=!<%9%D%j!<$r99?7$7$F:F9=C[$7!"?7$7$$%P!<%8%g%s$N(B
Heimdal $B$r%$%s%9%H!<%k$9$k$3$H$G!"LdBj$N$"$k%P%$%J%j!<$r%"%C%W%0%l!<%I(B
$B$9$kJ}K!$r@bL@$7$?$b$N$G$9!#(B


* NetBSD-current:

	2003 $BG/(B 3 $B7n(B 20 $BF|$h$jA0$N(B NetBSD-current $B$O!"(B
	2003 $BG/(B 3 $B7n(B 21 $BF|!"$b$7$/$O$=$l0J9_$N(B NetBSD-current $B$K(B
	$B%"%C%W%0%l!<%I$9$kI,MW$,$"$j$^$9!#(B

	CVS $B%V%i%s%A(B netbsd-current ($BJLL>(B HEAD) $B$K$*$$$F(B
	$B99?7$,I,MW$J%G%#%l%/%H%j$O!"<!$N$H$*$j$G$9!#(B
		crypto/dist/heimdal/kdc
		include/heimdal

	CVS $B$r;H$C$F%U%!%$%k$r99?7$7!"(BKDC $B%P%$%J%j!<$r(B
	$B:F9=C[!&:F%$%s%9%H!<%k$9$k$K$O!"<!$N%3%^%s%I$r<B9T$7$F$/$@$5$$!#(B

		# cd src
		# cvs update -d -P crypto/dist/heimdal/kdc include/heimdal
		# cd usr.sbin/kdc

		# make USETOOLS=no cleandir dependall
		# make USETOOLS=no install


* NetBSD 1.6:

	NetBSD 1.6 $B$N%P%$%J%j!<G[I[J*$K$O!"$3$N%;%-%e%j%F%#!<>e$N<eE@$,(B
	$B4^$^$l$F$$$^$9!#(B

	2003 $BG/(B 3 $B7n(B 22 $BF|$h$jA0$N(B NetBSD 1.6 $B$N%=!<%9$O!"(B
	2003 $BG/(B 3 $B7n(B 23 $BF|!"$b$7$/$O$=$l0J9_$N(B NetBSD 1.6 $B$N%=!<%9$K(B
	$B%"%C%W%0%l!<%I$9$kI,MW$,$"$j$^$9!#(B

	NetBSD 1.6.1 $B$K$O!"$3$N<eE@$KBP$9$k=$@5$,4^$^$l$kM=Dj$G$9!#(B

	CVS $B%V%i%s%A(B netbsd-1-6 $B$K$*$$$F(B
	$B99?7$,I,MW$J%U%!%$%k$O!"<!$N$H$*$j$G$9!#(B
		crypto/dist/heimdal/kdc
		include/heimdal

	CVS $B$r;H$C$F%U%!%$%k$r99?7$7!"(BKDC $B%P%$%J%j!<$r(B
	$B:F9=C[!&:F%$%s%9%H!<%k$9$k$K$O!"<!$N%3%^%s%I$r<B9T$7$F$/$@$5$$!#(B

		# cd src
		# cvs update -d -P -r netbsd-1-6 crypto/dist/heimdal/kdc \
			include/heimdal
		# cd usr.sbin/kdc

		# make USETOOLS=no cleandir dependall
		# make USETOOLS=no install


* NetBSD 1.5, 1.5.1, 1.5.2, 1.5.3:

	NetBSD 1.5.3 $B$N%P%$%J%j!<G[I[J*$K$O!"$3$N%;%-%e%j%F%#!<>e$N<eE@$,(B
	$B4^$^$l$F$$$^$9!#(B

	2003 $BG/(B 3 $B7n(B 31 $BF|$h$jA0$N(B NetBSD-1.5$B!"(BNetBSD-1.5.1$B!"(B
	NetBSD-1.5.2$B!"(BNetBSD-1.5.3 $B$N$$$:$l$+$N%=!<%9$r(B
	$B;H$C$F$$$k%7%9%F%`$O!"(B2003 $BG/(B 4 $B7n(B 1 $BF|!"$b$7$/$O$=$l0J9_$N(B
	NetBSD-1.5.* $B$N%=!<%9$K%"%C%W%0%l!<%I$9$kI,MW$,$"$j$^$9!#(B

	CVS $B%V%i%s%A(B netbsd-1-5 $B$K$*$$$F(B
	$B99?7$,I,MW$J%U%!%$%k$O!"<!$N$H$*$j$G$9!#(B
		crypto/dist/heimdal/kdc
		include/heimdal

	CVS $B$r;H$C$F%U%!%$%k$r99?7$7!"(BKDC $B%P%$%J%j!<$r(B
	$B:F9=C[!&:F%$%s%9%H!<%k$9$k$K$O!"<!$N%3%^%s%I$r<B9T$7$F$/$@$5$$!#(B

		# cd src
		# cvs update -d -P -r netbsd-1-5 crypto/dist/heimdal/kdc \
			include/heimdal
		# cd crypto/dist/heimdal/kdc

		# make cleandir dependall
		# make install



$B<U<-(B - Thanks To
================

Sam Hartman $B$*$h$S(B Tom Yu $B;a(B: $B:G=i$KLdBj$r;XE&$7!"$3$N4+9p$N860F$r(B
$BDs6!$7$F$/$l$^$7$?!#(B

Steve Bellovin $B;a(B: MIT $B$N?M$?$A$,<eE@$rH/8+$9$k$-$C$+$1$H$J$C$?>pJs$r(B
$BDs6!$7$F$/$l$^$7$?!#(B

Love Hornquist-Astrand $B;a(B: $B>pJs8r49$N<jG[$r$7$F$/$l$^$7$?!#(B

Josef T. Burger $B;a(B: $B9=C[<j=g$N=$@5$r;XE&$7$F$/$l$^$7$?!#(B


$B2~D{MzNr(B - Revision History
===========================

	2003-04-04	$B=iHG8x3+(B
	2003-04-04	$B9=C[<j=g$N(B `cd' $B$NItJ,$r=$@5(B


$B>\:Y$H;29M;qNA(B - More Information
=================================

$B?7$7$$>pJs$,H=L@$7$?>l9g!"%;%-%e%j%F%#!<4+9p$O99?7$5$l$k$3$H$,$"$j$^$9!#(B
PGP $B=pL>$5$l$?$3$N4+9p$N:G?7HG$O!"<!$N>l=j$+$iF~<j$G$-$^$9!#(B
  ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-006.txt.asc

NetBSD $B$*$h$S(B NetBSD $B$N%;%-%e%j%F%#!<$K4X$9$k>pJs$O!"<!$N>l=j$+$iF~<j$G$-$^$9!#(B
http://www.NetBSD.ORG/
http://www.NetBSD.ORG/Security/


Copyright 2003, The NetBSD Foundation, Inc.  All Rights Reserved.
Redistribution permitted only in full, unmodified form.

$NetBSD: NetBSD-SA2003-006.txt.asc,v 1.2 2003/04/13 18:05:00 yyamano Exp $
$Id: NetBSD-SA2003-006.txt.asc,v 1.2 2003/04/13 18:05:00 yyamano Exp $