CVE-2011-0285

Published: Apr 15, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Affected (7)

Products: Mit: Kerberos 5

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mit Kerberos 5	Version 1.7.1
Mit Kerberos 5	Version 1.7
Mit Kerberos 5	Version 1.8.1
Mit Kerberos 5	Version 1.8.2
Mit Kerberos 5	Version 1.8.3
Mit Kerberos 5	Version 1.8
Mit Kerberos 5	Version 1.9

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (36)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726

Source: cve@mitre.org

http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html

Source: cve@mitre.org

http://osvdb.org/71789

Source: cve@mitre.org

http://secunia.com/advisories/44125

Source: cve@mitre.org

http://secunia.com/advisories/44181

Source: cve@mitre.org

http://secunia.com/advisories/44196

Source: cve@mitre.org

http://securityreason.com/securityalert/8200

Source: cve@mitre.org

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:077

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-0447.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/517484/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/47310

Source: cve@mitre.org

http://www.securitytracker.com/id?1025320

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0936

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0986

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0997

Source: cve@mitre.org

https://hermes.opensuse.org/messages/8086843

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726

Source: af854a3a-2127-422b-91ae-364da2661108

http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/71789

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44125

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44181

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44196

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/8200

Source: af854a3a-2127-422b-91ae-364da2661108

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:077

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0447.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/517484/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47310

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025320

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0936

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0986

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0997

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/8086843

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.