10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.121 Low
EPSS
Percentile
94.8%
Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).
Multiple integer underflow flaws, leading to heap-based corruption, were
found in the way the MIT Kerberos Key Distribution Center (KDC) decrypted
ciphertexts encrypted with the Advanced Encryption Standard (AES) and
ARCFOUR (RC4) encryption algorithms. If a remote KDC client were able to
provide a specially-crafted AES- or RC4-encrypted ciphertext or texts, it
could potentially lead to either a denial of service of the central KDC
(KDC crash or abort upon processing the crafted ciphertext), or arbitrary
code execution with the privileges of the KDC (i.e., root privileges).
(CVE-2009-4212)
All krb5 users should upgrade to these updated packages, which contain a
backported patch to correct these issues. All running services using the
MIT Kerberos libraries must be restarted for the update to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 4 | i386 | krb5-devel | < 1.3.4-60.el4_7.3 | krb5-devel-1.3.4-60.el4_7.3.i386.rpm |
RedHat | 4 | s390x | krb5-libs | < 1.3.4-62.el4_8.1 | krb5-libs-1.3.4-62.el4_8.1.s390x.rpm |
RedHat | 5 | ia64 | krb5-devel | < 1.6.1-36.el5_4.1 | krb5-devel-1.6.1-36.el5_4.1.ia64.rpm |
RedHat | 4 | s390x | krb5-devel | < 1.3.4-62.el4_8.1 | krb5-devel-1.3.4-62.el4_8.1.s390x.rpm |
RedHat | 5 | x86_64 | krb5-devel | < 1.6.1-36.el5_4.1 | krb5-devel-1.6.1-36.el5_4.1.x86_64.rpm |
RedHat | 4 | i386 | krb5-libs | < 1.3.4-62.el4_8.1 | krb5-libs-1.3.4-62.el4_8.1.i386.rpm |
RedHat | 5 | s390x | krb5-workstation | < 1.6.1-36.el5_4.1 | krb5-workstation-1.6.1-36.el5_4.1.s390x.rpm |
RedHat | 4 | i386 | krb5-workstation | < 1.3.4-60.el4_7.3 | krb5-workstation-1.3.4-60.el4_7.3.i386.rpm |
RedHat | 4 | ia64 | krb5-server | < 1.3.4-62.el4_8.1 | krb5-server-1.3.4-62.el4_8.1.ia64.rpm |
RedHat | 5 | i386 | krb5-server | < 1.6.1-36.el5_4.1 | krb5-server-1.6.1-36.el5_4.1.i386.rpm |