CVE-2011-0281

2011-02-1018:00:55

CWE-310

mitre

web.nvd.nist.gov

mit kerberos 5

unparse implementation

cve-2011-0281

denial of service

file descriptor exhaustion

ldap backend

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

5.2

Confidence

High

EPSS

0.029

Percentile

90.8%

JSON

The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.

Affected configurations

Nvd

Node

mitkerberosMatch5-1.6.3

mitkerberos_5Match1.6

mitkerberos_5Match1.6.1

mitkerberos_5Match1.6.2

mitkerberos_5Match1.7

mitkerberos_5Match1.7.1

mitkerberos_5Match1.8

mitkerberos_5Match1.8.1

mitkerberos_5Match1.8.2

mitkerberos_5Match1.8.3

mitkerberos_5Match1.9

VendorProductVersionCPE
mitkerberos_51.8cpe:/a:mit:kerberos_5:1.8:::
mitkerberos_51.7.1cpe:/a:mit:kerberos_5:1.7.1:::
mitkerberos_51.8.3cpe:/a:mit:kerberos_5:1.8.3:::
mitkerberos_51.7cpe:/a:mit:kerberos_5:1.7:::
mitkerberos_51.8.2cpe:/a:mit:kerberos_5:1.8.2:::
mitkerberos_51.6cpe:/a:mit:kerberos_5:1.6:::
mitkerberos_51.6.2cpe:/a:mit:kerberos_5:1.6.2:::
mitkerberos_51.9cpe:/a:mit:kerberos_5:1.9:::
mitkerberos5-1.6.3cpe:/a:mit:kerberos:5-1.6.3:::
mitkerberos_51.6.1cpe:/a:mit:kerberos_5:1.6.1:::

Vendor	Product	Version	CPE
mit	kerberos_5	1.8	cpe:/a:mit:kerberos_5:1.8:::
mit	kerberos_5	1.7.1	cpe:/a:mit:kerberos_5:1.7.1:::
mit	kerberos_5	1.8.3	cpe:/a:mit:kerberos_5:1.8.3:::
mit	kerberos_5	1.7	cpe:/a:mit:kerberos_5:1.7:::
mit	kerberos_5	1.8.2	cpe:/a:mit:kerberos_5:1.8.2:::
mit	kerberos_5	1.6	cpe:/a:mit:kerberos_5:1.6:::
mit	kerberos_5	1.6.2	cpe:/a:mit:kerberos_5:1.6.2:::
mit	kerberos_5	1.9	cpe:/a:mit:kerberos_5:1.9:::
mit	kerberos	5-1.6.3	cpe:/a:mit:kerberos:5-1.6.3:::
mit	kerberos_5	1.6.1	cpe:/a:mit:kerberos_5:1.6.1:::