Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2006-5989

Published: 20/11/2006 Updated: 11/10/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote malicious users to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.

Vulnerable Product Search on Vulmon Subscribe to Product

mod auth kerb mod auth kerb 5.0

Vendor Advisories

Debian CVElist Bug Report Logs: libapache-mod-auth-kerb: Remote Vulnerability (CVE-2006-5989)
Debian Bug report logs - #400589 libapache-mod-auth-kerb: Remote Vulnerability (CVE-2006-5989) Package: libapache-mod-auth-kerb; Maintainer for libapache-mod-auth-kerb is Ghe Rivero <ghe@debianorg>; Reported by: Martin Schwier <schwier@uni-paderbornde> Date: Mon, 27 Nov 2006 14:03:06 UTC Severity: important Tags: c ...

References

NVD-CWE-Otherhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206736https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=136650http://www.securityfocus.com/bid/21214http://secunia.com/advisories/23023http://www.redhat.com/support/errata/RHSA-2006-0746.htmlhttp://secunia.com/advisories/23251http://securitytracker.com/id?1017348http://www.debian.org/security/2007/dsa-1247http://secunia.com/advisories/23681http://security.gentoo.org/glsa/glsa-200701-14.xmlhttp://secunia.com/advisories/23820http://www.mandriva.com/security/advisories?name=MDKSA-2006:218http://www.vupen.com/english/advisories/2006/4633https://exchange.xforce.ibmcloud.com/vulnerabilities/30456https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10051https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400589https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073CVE-2024-5496CVE-2024-5495XPath injectionbypassCVE-2024-30043CVE-2024-24919denial of serviceCVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook