National Cyber Awareness System

Vulnerability Summary for CVE-2010-4022

Overview

The do_standalone function in the MIT krb5 KDC database propagation daemon (kpropd) in Kerberos 1.7, 1.8, and 1.9, when running in standalone mode, does not properly handle when a worker child process "exits abnormally," which allows remote attackers to cause a denial of service (listening process termination, no new connections, and lack of updates in slave KVC) via unspecified vectors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BUGTRAQ

Name: 20110208 MITKRB5-SA-2011-001 kpropd denial of service [CVE-2010-4022]

Type: Patch Information

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/516286/100/0/threaded

External Source: CONFIRM

Name: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-001.txt

Type: Advisory; Patch Information

Hyperlink:http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-001.txt

External Source: VUPEN

Name: ADV-2011-0464

Hyperlink:http://www.vupen.com/english/advisories/2011/0464

External Source: VUPEN

Name: ADV-2011-0347

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0347

External Source: VUPEN

Name: ADV-2011-0333

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0333

External Source: VUPEN

Name: ADV-2011-0329

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0329

External Source: SECTRACK

Name: 1025035

Hyperlink:http://www.securitytracker.com/id?1025035

External Source: BID

Name: 46269

Hyperlink:http://www.securityfocus.com/bid/46269

External Source: REDHAT

Name: RHSA-2011:0200

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0200.html

External Source: MANDRIVA

Name: MDVSA-2011:025

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:025

External Source: SREASON

Name: 8070

Hyperlink:http://securityreason.com/securityalert/8070

External Source: SECUNIA

Name: 43275

Type: Advisory

Hyperlink:http://secunia.com/advisories/43275

External Source: SECUNIA

Name: 43260

Type: Advisory

Hyperlink:http://secunia.com/advisories/43260

External Source: SUSE

Name: SUSE-SR:2011:004

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html