CVE:CVE-2013-1416
CNNVD:CNNVD-201304-417
Kerberos是美国麻省理工学院（MIT）开发的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。
MIT Kerberos 5(又名krb5) 1.10.5之前的版本中的Key Distribution Center (KDC)中的do_tgs_req.c中的‘prep_reprocess_req’函数中存在漏洞，该漏洞源于程序未正确执行服务主体领域参考。远程攻击者可通过特制的TGS-REQ请求利用该漏洞造成拒绝服务（空指针逆向引用和守护进程崩溃）。
solution:Upgrade mit kerberos_5 to a higher version than 1.10.5,and avoid the version (,1.10.5); Upgrade opensuse opensuse to a higher version than 11.4,12.1,12.2,12.3,and avoid the version 11.4,12.1,12.2,12.3; Upgrade fedoraproject fedora to a higher version than 17,18,and avoid the version 17,18; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0