Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1088-1
HistoryMar 15, 2011 - 12:00 a.m.

Kerberos vulnerability

2011-03-1500:00:00
ubuntu.com
32

6.5 Medium

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.356 Low

EPSS

Percentile

97.1%

JSON

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04
  • Ubuntu 9.10

Packages

  • krb5 - MIT Kerberos primary server (kadmind)

Details

Cameron Meadors discovered that the MIT Kerberos 5 Key Distribution
Center (KDC) daemon is vulnerable to a double-free condition if
the Public Key Cryptography for Initial Authentication (PKINIT)
capability is enabled. This could allow a remote attacker to cause
a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchkrb5-kdc< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-admin-server< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-clients< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-ftpd< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-kdc-ldap< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-pkinit< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-rsh-server< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-telnetd< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchkrb5-user< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Ubuntu9.10noarchlibgssapi-krb5-2< 1.7dfsg~beta3-1ubuntu0.12UNKNOWN
Rows per page:
1-10 of 511

Related

nessus 13
securityvulns 2
debiancve 1
openvas 25
prion 1
cve 1
redhat 1
fedora 9
ubuntucve 1
oraclelinux 1
cert 1
freebsd 1
gentoo 1
nessus
nessus
Fedora 13 : krb5-1.7.1-18.fc13 (2011-3464)
2011-03-25 00:00:00
openSUSE Security Update : krb5 (krb5-4163)
2014-06-13 00:00:00
openSUSE Security Update : krb5 (krb5-4163)
2014-06-13 00:00:00
securityvulns
securityvulns
MIT Kerberos 5 double free
2011-03-16 00:00:00
MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enabled
2011-03-16 00:00:00
debiancve
debiancve
CVE-2011-0284
2011-03-20 02:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2011-0356)
2015-10-06 00:00:00
Ubuntu Update for krb5 vulnerability USN-1088-1
2011-03-24 00:00:00
Ubuntu: Security Advisory (USN-1088-1)
2011-03-24 00:00:00
prion
prion
Double free
2011-03-20 02:00:00
cve
cve
CVE-2011-0284
2011-03-20 02:00:00
redhat
redhat
(RHSA-2011:0356) Important: krb5 security update
2011-03-16 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9-6.fc15
2011-03-22 03:46:07
[SECURITY] Fedora 13 Update: krb5-1.7.1-18.fc13
2011-03-24 19:27:05
[SECURITY] Fedora 14 Update: krb5-1.8.2-9.fc14
2011-03-24 19:28:10
ubuntucve
ubuntucve
CVE-2011-0284
2011-03-15 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-03-16 00:00:00
cert
cert
MIT KDC vulnerable to double-free when PKINIT enabled
2011-03-15 00:00:00
freebsd
freebsd
krb5 -- MITKRB5-SA-2011-003, KDC vulnerable to double-free when PKINIT enabled
2011-03-15 00:00:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00

6.5 Medium

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.356 Low

EPSS

Percentile

97.1%

JSON
Related for USN-1088-1
nessus13securityvulns2debiancve1openvas25prion1cve1redhat1fedora9ubuntucve1oraclelinux1cert1freebsd1gentoo1