Veracode Vulnerability DatabaseVERACODE:24251Denial Of Service (DoS)
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
Kerberos is vulnerable to Denial of Service (DoS). Multiple checksum validation flaws were discovered in the MIT Kerberos implementation. A remote attacker could use these flaws to tamper with certain Kerberos protocol packets and, possibly, bypass authentication mechanisms in certain configurations using Single-use Authentication Mechanisms.
References
kb.vmware.com/kb/1035108
lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html
lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html
lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
lists.opensuse.org/opensuse-security-announce/2012-01/msg00002.html
lists.opensuse.org/opensuse-security-announce/2012-01/msg00010.html
lists.vmware.com/pipermail/security-announce/2011/000133.html
marc.info/?l=bugtraq&m=129562442714657&w=2
marc.info/?l=bugtraq&m=130497213107107&w=2
osvdb.org/69610
secunia.com/advisories/42399
secunia.com/advisories/42420
secunia.com/advisories/42436
secunia.com/advisories/43015
secunia.com/advisories/46397
support.apple.com/kb/HT4581
web.mit.edu/Kerberos/advisories/MITKRB5-SA-2010-007.txt
www.debian.org/security/2010/dsa-2129
www.mandriva.com/security/advisories?name=MDVSA-2010:245
www.mandriva.com/security/advisories?name=MDVSA-2010:246
www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
www.redhat.com/security/updates/classification/#moderate
www.redhat.com/support/errata/RHSA-2010-0925.html
www.redhat.com/support/errata/RHSA-2010-0926.html
www.securityfocus.com/archive/1/514953/100/0/threaded
www.securityfocus.com/archive/1/517739/100/0/threaded
www.securityfocus.com/archive/1/520102/100/0/threaded
www.securityfocus.com/bid/45118
www.securitytracker.com/id?1024803
www.ubuntu.com/usn/USN-1030-1
www.vmware.com/security/advisories/VMSA-2011-0007.html
www.vmware.com/security/advisories/VMSA-2011-0012.html
www.vupen.com/english/advisories/2010/3094
www.vupen.com/english/advisories/2010/3095
www.vupen.com/english/advisories/2010/3101
www.vupen.com/english/advisories/2010/3118
www.vupen.com/english/advisories/2011/0187
access.redhat.com/errata/RHSA-2010:0926
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12121
Related
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N