Published: 07/04/2010 Updated: 02/02/2024

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 up to and including 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mit kerberos 5
fedoraproject fedora 11
opensuse opensuse 11.1
opensuse opensuse 11.0
suse linux enterprise 11.0
canonical ubuntu linux 9.04
canonical ubuntu linux 8.10
canonical ubuntu linux 8.04

Synopsis Important: krb5 security and bug fix update Type/Severity Security Advisory: Important Topic Updated krb5 packages that fix one security issue and one bug are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact A C ...

Sol Jerome discovered that the Kerberos kadmind service did not correctly free memory An unauthenticated remote attacker could send specially crafted traffic to crash the kadmind process, leading to a denial of service (CVE-2010-0629) ...

Sol Jerome discovered that kadmind service in krb5, a system for authenticating users and services on a network, allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number For the stable distribution (lenny), this problem has been fixed in version 16df ...

CWE-416 http://securitytracker.com/id?1023821 http://www.securityfocus.com/bid/39247 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 http://www.mandriva.com/security/advisories?name=MDVSA-2010:071 http://www.debian.org/security/2010/dsa-2031 http://www.redhat.com/support/errata/RHSA-2010-0343.html http://ubuntu.com/usn/usn-924-1 http://secunia.com/advisories/39290 http://secunia.com/advisories/39367 http://secunia.com/advisories/39324 http://secunia.com/advisories/39264 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html http://www.vupen.com/english/advisories/2010/0876 http://secunia.com/advisories/39315 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489 http://www.securityfocus.com/archive/1/510566/100/0/threaded https://access.redhat.com/errata/RHSA-2010:0343 https://usn.ubuntu.com/924-1/https://nvd.nist.gov

CVE-2010-0629

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect