CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
95.7%
Emmanuel Bouillon discovered that the MIT krb5 Key Distribution Center
(KDC) daemon could free an uninitialized pointer when handling a
malformed AS-REQ message. A remote unauthenticated attacker could
use this to cause a denial of service or possibly execute arbitrary
code. (CVE-2012-1015)
Emmanuel Bouillon discovered that the MIT krb5 Key Distribution Center
(KDC) daemon could dereference an uninitialized pointer while handling
a malformed AS-REQ message. A remote unauthenticated attacker could
use this to cause a denial of service or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-1014)
Simo Sorce discovered that the MIT krb5 Key Distribution Center (KDC)
daemon could dereference a NULL pointer when handling a malformed
TGS-REQ message. A remote authenticated attacker could use this to
cause a denial of service. (CVE-2012-1013)
It was discovered that the kadmin protocol implementation in MIT krb5
did not properly restrict access to the SET_STRING and GET_STRINGS
operations. A remote authenticated attacker could use this to expose
or modify sensitive information. This issue only affected Ubuntu
12.04 LTS. (CVE-2012-1012)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.04 | noarch | krb5-admin-server | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-gss-samples | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-kdc | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-kdc-ldap | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-multidev | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-pkinit | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | krb5-user | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | libgssapi-krb5-2 | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | libgssrpc4 | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |
Ubuntu | 12.04 | noarch | libk5crypto3 | < 1.10+dfsg~beta1-2ubuntu0.3 | UNKNOWN |