Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-1527
HistoryOct 18, 2011 - 12:00 a.m.

CVE-2011-1527

2011-10-1800:00:00
ubuntu.com
ubuntu.com
15

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.707 High

EPSS

Percentile

98.0%

JSON

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5
(aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote
attackers to cause a denial of service (NULL pointer dereference and daemon
crash) via a kinit operation with incorrect string case for the realm,
related to the is_principal_in_realm, krb5_set_error_message,
krb5_ldap_get_principal, and process_as_req functions.

Bugs

Notes

Author Note
sbeattie CRD Tuesday, 18 October 2011, at 14:00 US/Eastern time krb5 1.9 only
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchkrb5< 1.9.1+dfsg-1ubuntu1.1UNKNOWN

Related

checkpoint_advisories 1
cve 1
prion 1
veracode 1
debiancve 1
nessus 9
openvas 16
redhat 1
amazon 1
securityvulns 2
ubuntu 1
oraclelinux 1
cert 1
fedora 4
gentoo 1
checkpoint_advisories
checkpoint_advisories
MIT Kerberos KDC LDAP Back Null Pointer Dereference Denial of Service (CVE-2011-1527)
2012-01-17 00:00:00
cve
cve
CVE-2011-1527
2011-10-20 21:55:00
prion
prion
Null pointer dereference
2011-10-20 21:55:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:05:59
debiancve
debiancve
CVE-2011-1527
2011-10-20 21:55:00
nessus
nessus
RHEL 6 : krb5 (RHSA-2011:1379)
2011-10-19 00:00:00
Scientific Linux Security Update : krb5 on SL6.x i386/x86_64
2012-08-01 00:00:00
Mandriva Linux Security Advisory : krb5 (MDVSA-2011:159)
2012-09-06 00:00:00
openvas
openvas
RedHat Update for krb5 RHSA-2011:1379-01
2012-07-09 00:00:00
Ubuntu: Security Advisory (USN-1233-1)
2011-10-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2011-15)
2015-09-08 00:00:00
redhat
redhat
(RHSA-2011:1379) Moderate: krb5 security update
2011-10-18 00:00:00
amazon
amazon
Medium: krb5
2011-10-31 18:26:00
securityvulns
securityvulns
MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529]
2011-10-24 00:00:00
MIT krb5 FTP server privilege escalation
2011-10-24 00:00:00
ubuntu
ubuntu
Kerberos Vulnerabilities
2011-10-18 00:00:00
oraclelinux
oraclelinux
krb5 security update
2011-10-18 00:00:00
cert
cert
Multiple MIT KRB5 KDC daemon vulnerabilities
2011-10-24 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: krb5-1.9.1-14.fc15
2011-11-16 00:26:53
[SECURITY] Fedora 15 Update: krb5-1.9.2-4.fc15
2012-01-31 21:55:08
[SECURITY] Fedora 15 Update: krb5-1.9.3-2.fc15
2012-06-13 21:36:32
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2012-01-23 00:00:00

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.707 High

EPSS

Percentile

98.0%

JSON
Related for UB:CVE-2011-1527
checkpoint_advisories1cve1prion1veracode1debiancve1nessus9openvas16redhat1amazon1securityvulns2ubuntu1oraclelinux1cert1fedora4gentoo1