CVE-2011-0285

2011-04-1500:55:00

CWE-20

[email protected]

web.nvd.nist.gov

mit kerberos 5

cve-2011-0285

process_chpw_request

remote attackers

arbitrary code

security vulnerability

6.7 Medium

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.246 Low

EPSS

Percentile

96.6%

JSON

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

CPENameOperatorVersion
mit:kerberos_5mit kerberos 5eq1.7
mit:kerberos_5mit kerberos 5eq1.7.1
mit:kerberos_5mit kerberos 5eq1.8
mit:kerberos_5mit kerberos 5eq1.8.1
mit:kerberos_5mit kerberos 5eq1.8.2
mit:kerberos_5mit kerberos 5eq1.8.3
mit:kerberos_5mit kerberos 5eq1.9

CPE	Name	Operator	Version
mit:kerberos_5	mit kerberos 5	eq	1.7
mit:kerberos_5	mit kerberos 5	eq	1.7.1
mit:kerberos_5	mit kerberos 5	eq	1.8
mit:kerberos_5	mit kerberos 5	eq	1.8.1
mit:kerberos_5	mit kerberos 5	eq	1.8.2
mit:kerberos_5	mit kerberos 5	eq	1.8.3
mit:kerberos_5	mit kerberos 5	eq	1.9