Lucene search

K
exploitdbFelipe OrtegaEDB-ID:35606
HistoryApr 11, 2011 - 12:00 a.m.

MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution

2011-04-1100:00:00
Felipe Ortega
www.exploit-db.com
23

AI Score

7.4

Confidence

Low

source: https://www.securityfocus.com/bid/47310/info

MIT Kerberos is prone to a remote code-execution vulnerability in 'kadmind'.

An attacker may exploit this issue to execute arbitrary code with superuser privileges. Failed attempts will cause the affected application to crash, denying service to legitimate users. A successful exploit will completely compromise affected computers.

MIT Kerberos 5 1.7 and later are vulnerable.

NOTE (April 13, 2011): This BID was originally titled 'MIT Kerberos kadmind Version String Processing Remote Denial Of Service Vulnerability', but has been renamed to better reflect the nature of the issue. 

# nmap -n -sV krb01