Lucene search

K
f5F5F5:K13432
HistorySep 09, 2013 - 12:00 a.m.

K13432 : OpenSSL vulnerability CVE-2010-0433

2013-09-0900:00:00
my.f5.com
9

5.9 Medium

AI Score

Confidence

Low

Security Advisory Description

In the kssl_keytab_is_availablefunction in ssl/kssl.c in OpenSSL before 0.9.8n., when Kerberos is enabled, but Kerberos configuration files cannot be opened, the function does not check a certain return value, which allows remote attackers to cause a Denial of Service (DoS) (NULL pointer dereference and daemon crash) through SSL cipher negotiation.

Impact

None