Lucene search
UbuntuUSN-1116-1HistoryApr 19, 2011 - 12:00 a.m.
Kerberos vulnerability
2011-04-1900:00:00
ubuntu.com
39
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
High
EPSS
0.246
Percentile
96.7%
Releases
- Ubuntu 10.10
- Ubuntu 10.04
- Ubuntu 9.10
Packages
- krb5 - MIT Kerberos services
Details
Felipe Ortega discovered that kadmind did not correctly handle password
changing error conditions. An unauthenticated remote attacker could exploit
this to crash kadmind, leading to a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.10 | noarch | krb5-admin-server | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-clients | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-ftpd | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-kdc | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-kdc-ldap | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-pkinit | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-rsh-server | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-telnetd | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | krb5-user | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
| Ubuntu | 9.10 | noarch | libgssapi-krb5-2 | < 1.7dfsg~beta3-1ubuntu0.13 | UNKNOWN |
References
Related
openvas
openvas
Oracle: Security Advisory (ELSA-2011-0447)
2015-10-06 00:00:00
Mandriva Update for krb5 MDVSA-2011:077 (krb5)
2011-04-29 00:00:00
Mandriva Update for krb5 MDVSA-2011:077 (krb5)
2011-04-29 00:00:00
nessus
nessus
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2011-05-05 00:00:00
openSUSE Security Update : krb5 (openSUSE-SU-2011:0348-1)
2014-06-13 00:00:00
Ubuntu 9.10 / 10.04 LTS / 10.10 : krb5 vulnerability (USN-1116-1)
2011-06-13 00:00:00
prion
prion
Design/Logic Flaw
2011-04-15 00:55:00
nvd
nvd
CVE-2011-0285
2011-04-15 00:55:00
redhat
redhat
(RHSA-2011:0447) Moderate: krb5 security update
2011-04-14 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-04-14 00:00:00
cvelist
cvelist
CVE-2011-0285
2011-04-15 00:00:00
exploitdb
exploitdb
MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution
2011-04-11 00:00:00
securityvulns
securityvulns
MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]
2011-04-14 00:00:00
MIT Kerberos 5 memory corruption
2011-04-14 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9-7.fc15
2011-04-15 21:40:36
[SECURITY] Fedora 14 Update: krb5-1.8.2-10.fc14
2011-04-25 20:52:50
[SECURITY] Fedora 13 Update: krb5-1.7.1-19.fc13
2011-04-25 20:58:10
cve
cve
CVE-2011-0285
2011-04-15 00:55:00
ubuntucve
ubuntucve
CVE-2011-0285
2011-04-14 00:00:00
freebsd
freebsd
krb5 -- MITKRB5-SA-2011-004, kadmind invalid pointer free() [CVE-2011-0285]
2011-04-12 00:00:00
debiancve
debiancve
CVE-2011-0285
2011-04-15 00:55:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
High
EPSS
0.246
Percentile
96.7%
Related for USN-1116-1