5

CVE-2006-6144

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.

Data is provided by the National Vulnerability Database (NVD)
MitKerberos 5 Version >= 1.5 <= 1.5.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 27.2% 0.962
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
http://www.us-cert.gov/cas/techalerts/TA07-009B.html
Third Party Advisory
US Government Resource
http://securitytracker.com/id?1017494
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/831452
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/21975
Third Party Advisory
VDB Entry