Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-0285HistoryApr 15, 2011 - 12:55 a.m.
CVE-2011-0285
2011-04-1500:55:00
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.246
Percentile
96.7%
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | krb5 | < 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 11 | all | krb5 | < 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 999 | all | krb5 | < 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
| Debian | 13 | all | krb5 | < 1.9.1+dfsg-1 | krb5_1.9.1+dfsg-1_all.deb |
Related
openvas
openvas
RedHat Update for krb5 RHSA-2011:0447-01
2012-06-06 00:00:00
FreeBSD Ports: krb5
2011-05-12 00:00:00
Oracle: Security Advisory (ELSA-2011-0447)
2015-10-06 00:00:00
securityvulns
securityvulns
MIT Kerberos 5 memory corruption
2011-04-14 00:00:00
MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]
2011-04-14 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9-7.fc15
2011-04-15 21:40:36
[SECURITY] Fedora 14 Update: krb5-1.8.2-10.fc14
2011-04-25 20:52:50
[SECURITY] Fedora 13 Update: krb5-1.7.1-19.fc13
2011-04-25 20:58:10
cve
cve
CVE-2011-0285
2011-04-15 00:55:00
nessus
nessus
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2011-05-05 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2014-06-13 00:00:00
Ubuntu 9.10 / 10.04 LTS / 10.10 : krb5 vulnerability (USN-1116-1)
2011-06-13 00:00:00
prion
prion
Design/Logic Flaw
2011-04-15 00:55:00
nvd
nvd
CVE-2011-0285
2011-04-15 00:55:00
redhat
redhat
(RHSA-2011:0447) Moderate: krb5 security update
2011-04-14 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-04-14 00:00:00
cvelist
cvelist
CVE-2011-0285
2011-04-15 00:00:00
exploitdb
exploitdb
MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution
2011-04-11 00:00:00
ubuntucve
ubuntucve
CVE-2011-0285
2011-04-14 00:00:00
freebsd
freebsd
krb5 -- MITKRB5-SA-2011-004, kadmind invalid pointer free() [CVE-2011-0285]
2011-04-12 00:00:00
ubuntu
ubuntu
Kerberos vulnerability
2011-04-19 00:00:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.246
Percentile
96.7%
Related for DEBIANCVE:CVE-2011-0285