Published: 22/04/2010 Updated: 21/01/2020

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 405

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x prior to 1.8.2 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a request associated with (1) renewal or (2) validation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mit kerberos 5 1.8
mit kerberos 5 1.8.1
mit kerberos 5 1.7
mit kerberos 5 1.7.1

Debian Bug report logs - #577490 CVE-2010-1320 double free in KDC caused by ticket renewal Package: krb5-kdc; Maintainer for krb5-kdc is Sam Hartman <hartmans@debianorg>; Source for krb5-kdc is src:krb5 (PTS, buildd, popcon) Reported by: Joel Johnson <mrjoel@lixilnet> Date: Mon, 12 Apr 2010 05:39:01 UTC Severity: ...

Unauthenticated remote attackers could cause Kerberos servers to crash, leading to a denial of service ...

An attacker could send crafted input to kadmind and cause it to crash ...

source: wwwsecurityfocuscom/bid/39599/info MIT Kerberos is prone to a remote memory-corruption vulnerability An authenticated attacker can exploit this issue by sending specially crafted ticket-renewal requests to a vulnerable computer Successfully exploiting this issue can allow the attacker to execute arbitrary code with superuser p ...

CWE-399 http://securitytracker.com/id?1023904 http://www.securityfocus.com/bid/39599 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-004.txt http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490 http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html http://www.vupen.com/english/advisories/2010/1001 http://secunia.com/advisories/39656 http://www.ubuntu.com/usn/USN-940-1 http://www.vupen.com/english/advisories/2010/1192 http://secunia.com/advisories/39784 http://support.apple.com/kb/HT4188 http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html http://secunia.com/advisories/40220 http://www.vupen.com/english/advisories/2010/1481 http://www.securityfocus.com/archive/1/510843/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577490 https://nvd.nist.gov https://usn.ubuntu.com/940-1/https://www.exploit-db.com/exploits/33855/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-1320

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect