CVE-2006-6143

Published: Dec 31, 2006Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected (9)

Products: Mit: Kerberos 5 · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Version 1.4.1
Mit Kerberos 5	Version 1.4.2
Mit Kerberos 5	Version 1.4.3
Mit Kerberos 5	Version 1.4.4
Mit Kerberos 5	Version 1.4
Mit Kerberos 5	Version 1.5.1
Mit Kerberos 5	Version 1.5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (58)

http://docs.info.apple.com/article.html?artnum=305391

Source: cve@mitre.org

Broken Link

http://fedoranews.org/cms/node/2375

Source: cve@mitre.org

Broken Link

http://fedoranews.org/cms/node/2376

Source: cve@mitre.org

Broken Link

http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Source: cve@mitre.org

Mailing List

http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html

Source: cve@mitre.org

Broken Link

http://osvdb.org/31281

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23667

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23696

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23701

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23706

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23707

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23772

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/23903

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/24966

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-200701-21.xml

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1017493

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/481564

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2007:008

Source: cve@mitre.org

Third Party Advisory

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/456406/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/21970

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-408-1

Source: cve@mitre.org

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA07-009B.html

Source: cve@mitre.org

Broken LinkPatchThird Party AdvisoryUS Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Source: cve@mitre.org

Broken LinkThird Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2007/0111

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2007/1470

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/31422

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-925

Source: cve@mitre.org

Broken Link

http://docs.info.apple.com/article.html?artnum=305391