National Cyber Awareness System

Vulnerability Summary for CVE-2011-0285

Overview

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BUGTRAQ

Name: 20110413 MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]

Type: Patch Information

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/517484/100/0/threaded

External Source: CONFIRM

Name: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt

Type: Advisory; Patch Information

Hyperlink:http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt

External Source: SUSE

Name: openSUSE-SU-2011:0348

Hyperlink:https://hermes.opensuse.org/messages/8086843

External Source: VUPEN

Name: ADV-2011-0997

Hyperlink:http://www.vupen.com/english/advisories/2011/0997

External Source: VUPEN

Name: ADV-2011-0986

Hyperlink:http://www.vupen.com/english/advisories/2011/0986

External Source: VUPEN

Name: ADV-2011-0936

Hyperlink:http://www.vupen.com/english/advisories/2011/0936

External Source: SECTRACK

Name: 1025320

Hyperlink:http://www.securitytracker.com/id?1025320

External Source: BID

Name: 47310

Hyperlink:http://www.securityfocus.com/bid/47310

External Source: REDHAT

Name: RHSA-2011:0447

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0447.html

External Source: MANDRIVA

Name: MDVSA-2011:077

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:077

External Source: SREASON

Name: 8200

Hyperlink:http://securityreason.com/securityalert/8200

External Source: SECUNIA

Name: 44196

Hyperlink:http://secunia.com/advisories/44196

External Source: SECUNIA

Name: 44181

Hyperlink:http://secunia.com/advisories/44181

External Source: SECUNIA

Name: 44125

Hyperlink:http://secunia.com/advisories/44125

External Source: OSVDB

Name: 71789

Hyperlink:http://osvdb.org/71789

External Source: FEDORA

Name: FEDORA-2011-5333

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.html

External Source: CONFIRM

Name: http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899

Hyperlink:http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899

External Source: CONFIRM

Name: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726

Hyperlink:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726