CryptoLib Command Injection Vulnerability in Kerberos Login Function

A command injection vulnerability has been identified in CryptoLib versions prior to 1.4.2. The issue arises in the 'initialize_kerberos_keytab_file_login()' function, where user-controlled input is directly interpolated into a shell command and executed via 'system()' without any sanitization or validation. This vulnerability allows for arbitrary command execution by manipulating the 'username' or 'keytab_file_path' parameters.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the system where CryptoLib is running.

Reproduction

The vulnerability can be reproduced by calling the 'Crypto_Config_Cam()' function with malicious input that includes command execution payloads in the 'username' or 'keytab_file_path' parameters. This will trigger the vulnerability by executing the injected commands when 'initialize_kerberos_keytab_file_login()' is called.

Remediation

Users can upgrade to CryptoLib version 1.4.2 or later, where this vulnerability has been patched.