CVE-2011-0285

🗓️ 15 Apr 2011 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 73 Views

The process_chpw_request function in MIT Kerberos 5 1.7 through 1.9 allows remote attackers to execute arbitrary code

Reporter	Title	Published	Views	Family All 75
FreeBSD	krb5 -- MITKRB5-SA-2011-004, kadmind invalid pointer free() [CVE-2011-0285]	12 Apr 201100:00	–	freebsd
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

NVD

Node

mit kerberos_5Match1.7

OR

mit kerberos_5Match1.7.1

OR

mit kerberos_5Match1.8

OR

mit kerberos_5Match1.8.1

OR

mit kerberos_5Match1.8.2

OR

mit kerberos_5Match1.8.3

OR

mit kerberos_5Match1.9

Source	Link
vupen	www.vupen.com/english/advisories/2011/0936
hermes	www.hermes.opensuse.org/messages/8086843
secunia	www.secunia.com/advisories/44125
vupen	www.vupen.com/english/advisories/2011/0986
krbdev	www.krbdev.mit.edu/rt/Ticket/Display.html
vupen	www.vupen.com/english/advisories/2011/0997
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html
securityfocus	www.securityfocus.com/bid/47310
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
securityfocus	www.securityfocus.com/archive/1/517484/100/0/threaded

16 Jun 2026 23:27Current

6Medium risk

Vulners AI Score6

CVSS 210

EPSS0.17945

mit kerberos 5 cve-2011-0285 process_chpw_request remote attackers arbitrary code security vulnerability