10

CVE-2011-0285

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mit ≫ Kerberos 5 Version1.7
Mit ≫ Kerberos 5 Version1.7.1
Mit ≫ Kerberos 5 Version1.8
Mit ≫ Kerberos 5 Version1.8.1
Mit ≫ Kerberos 5 Version1.8.2
Mit ≫ Kerberos 5 Version1.8.3
Mit ≫ Kerberos 5 Version1.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.95% 0.968
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726
http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html
http://osvdb.org/71789
http://secunia.com/advisories/44125
http://secunia.com/advisories/44181
http://secunia.com/advisories/44196
http://securityreason.com/securityalert/8200
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2011:077
http://www.redhat.com/support/errata/RHSA-2011-0447.html
http://www.securityfocus.com/archive/1/517484/100/0/threaded
http://www.securityfocus.com/bid/47310
http://www.securitytracker.com/id?1025320
http://www.vupen.com/english/advisories/2011/0936
http://www.vupen.com/english/advisories/2011/0986
http://www.vupen.com/english/advisories/2011/0997
https://hermes.opensuse.org/messages/8086843