CVE-2014-8650

Advisory

Python-requests-Kerberos through 0.5 does not handle mutual authentication correctly. See: CVE-2014-8650 and <https://www.openwall.com/lists/oss-security/2014/11/07/1>.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

python-requests-Kerberos through 0.5 does not handle mutual authentication


MISC:http://www.openwall.com/lists/oss-security/2014/11/07/1: http://www.openwall.com/lists/oss-security/2014/11/07/1
MISC:http://www.securityfocus.com/bid/70909: http://www.securityfocus.com/bid/70909
MISC:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650
MISC:https://security-tracker.debian.org/tracker/CVE-2014-8650: https://security-tracker.debian.org/tracker/CVE-2014-8650

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8650
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650
• http://www.openwall.com/lists/oss-security/2014/11/07/1
• https://security-tracker.debian.org/tracker/CVE-2014-8650
• http://www.securityfocus.com/bid/70909