CVE-2010-4022

Published: Feb 10, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.

Affected (3)

Products: Mit: Kerberos 5

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Version 1.7
Mit Kerberos 5	Version 1.8
Mit Kerberos 5	Version 1.9

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (28)

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/43260

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/43275

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/8070

Source: cve@mitre.org

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-001.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:025

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-0200.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/516286/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/46269

Source: cve@mitre.org

http://www.securitytracker.com/id?1025035

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0329

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0333

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0347

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0464

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43260

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43275

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8070

Source: af854a3a-2127-422b-91ae-364da2661108

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-001.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:025

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0200.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516286/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46269

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025035

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0329

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0333

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0347

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0464

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.