CVE-2008-0062

Published: Mar 19, 2008Modified: Apr 23, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

Affected (9)

Products: Mit: Kerberos 5 · Debian: Debian Linux · Canonical: Ubuntu Linux · +1 more

Show all products

Mit: Kerberos 5 · Debian: Debian Linux · Canonical: Ubuntu Linux · Fedoraproject: Fedora

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Up to 1.6.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 7
Fedoraproject Fedora	Version 8

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (96)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

Broken Link

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html

Source: cve@mitre.org

Mailing List

http://marc.info/?l=bugtraq&m=130497213107107&w=2

Source: cve@mitre.org

Mailing List

http://secunia.com/advisories/29420

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29423

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29424

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29428

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29435

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29438

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29450

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29451

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29457

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29462

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29464

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29516

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/29663

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/30535

Source: cve@mitre.org

Broken Link

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html

Source: cve@mitre.org

Broken Link

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html

Source: cve@mitre.org

Broken Link

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt

Source: cve@mitre.org

Third Party Advisory

http://wiki.rpath.com/Advisories:rPSA-2008-0112

Source: cve@mitre.org

Broken Link

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

Source: cve@mitre.org

Broken Link

http://www.debian.org/security/2008/dsa-1524

Source: cve@mitre.org

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml

Source: cve@mitre.org

Third Party Advisory

http://www.kb.cert.org/vuls/id/895609

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:069

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2008:070

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2008:071

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0164.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0180.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0181.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0182.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/489761

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/489883/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/28303

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1019626

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-587-1

Source: cve@mitre.org

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0922/references

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2008/1102/references

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2008/1744

Source: cve@mitre.org

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/41275

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9496

Source: cve@mitre.org

Broken Link

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.html

Source: cve@mitre.org

Mailing List

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.html

Source: cve@mitre.org

Mailing List

http://docs.info.apple.com/article.html?artnum=307562