Published: 20/10/2011 Updated: 21/01/2020

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 up to and including 1.9.1, when the LDAP back end is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mit kerberos 5 1.9.1
mit kerberos 5 1.9

Several denial of service issues were fixed in the Kerberos Key Distribution Center (KDC) ...

Multiple NULL pointer dereference and assertion failure flaws were found in the MIT Kerberos KDC when it was configured to use an LDAP (Lightweight Directory Access Protocol) or Berkeley Database (Berkeley DB) back end A remote attacker could use these flaws to crash the KDC (CVE-2011-1527, CVE-2011-1528, CVE-2011-1529) ...

CWE-20 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629558 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt http://www.redhat.com/support/errata/RHSA-2011-1379.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:159 http://www.kb.cert.org/vuls/id/659251 https://usn.ubuntu.com/1233-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/659251

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-1527

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect