CVE

Id
22248  
CVE No.
CVE-2006-6144  
Status
Candidate  
Description
The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
214926 22248 CVE-2006-6144 BUGTRAQ:20070109 MITKRB5-SA-2006-003: kadmind (via GSS-API lib) frees uninitialized pointers  View
214927 22248 CVE-2006-6144 URL:http://www.securityfocus.com/archive/1/archive/1/456409/100/0/threaded  View
214928 22248 CVE-2006-6144 CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-003-mechglue.txt  View
214929 22248 CVE-2006-6144 CONFIRM:https://issues.rpath.com/browse/RPL-925  View
214930 22248 CVE-2006-6144 FEDORA:FEDORA-2007-033  View
214931 22248 CVE-2006-6144 URL:http://fedoranews.org/cms/node/2375  View
214932 22248 CVE-2006-6144 GENTOO:GLSA-200701-21  View
214933 22248 CVE-2006-6144 URL:http://security.gentoo.org/glsa/glsa-200701-21.xml  View
214934 22248 CVE-2006-6144 OPENPKG:OpenPKG-SA-2007.006  View
214935 22248 CVE-2006-6144 URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html  View
214936 22248 CVE-2006-6144 SUNALERT:102772  View
214937 22248 CVE-2006-6144 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102772-1  View
214938 22248 CVE-2006-6144 SUNALERT:201294  View
214939 22248 CVE-2006-6144 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-201294-1  View
214940 22248 CVE-2006-6144 SUSE:SUSE-SA:2007:004  View
214941 22248 CVE-2006-6144 URL:http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html  View
214942 22248 CVE-2006-6144 CERT:TA07-009B  View
214943 22248 CVE-2006-6144 URL:http://www.us-cert.gov/cas/techalerts/TA07-009B.html  View
214944 22248 CVE-2006-6144 CERT-VN:VU#831452  View
214945 22248 CVE-2006-6144 URL:http://www.kb.cert.org/vuls/id/831452  View
214946 22248 CVE-2006-6144 BID:21975  View
214947 22248 CVE-2006-6144 URL:http://www.securityfocus.com/bid/21975  View
214948 22248 CVE-2006-6144 SECUNIA:35151  View
214949 22248 CVE-2006-6144 URL:http://secunia.com/advisories/35151  View
214950 22248 CVE-2006-6144 VUPEN:ADV-2007-0111  View
214951 22248 CVE-2006-6144 URL:http://www.vupen.com/english/advisories/2007/0111  View
214952 22248 CVE-2006-6144 VUPEN:ADV-2007-0112  View
214953 22248 CVE-2006-6144 URL:http://www.vupen.com/english/advisories/2007/0112  View
214954 22248 CVE-2006-6144 OSVDB:31280  View
214955 22248 CVE-2006-6144 URL:http://osvdb.org/31280  View
214956 22248 CVE-2006-6144 SECTRACK:1017494  View
214957 22248 CVE-2006-6144 URL:http://securitytracker.com/id?1017494  View
214958 22248 CVE-2006-6144 SECUNIA:23690  View
214959 22248 CVE-2006-6144 URL:http://secunia.com/advisories/23690  View
214960 22248 CVE-2006-6144 SECUNIA:23701  View
214961 22248 CVE-2006-6144 URL:http://secunia.com/advisories/23701  View
214962 22248 CVE-2006-6144 SECUNIA:23706  View
214963 22248 CVE-2006-6144 URL:http://secunia.com/advisories/23706  View
214964 22248 CVE-2006-6144 SECUNIA:23903  View
214965 22248 CVE-2006-6144 URL:http://secunia.com/advisories/23903  View
214966 22248 CVE-2006-6144 XF:kerberos-gssapi-code-execution(31417)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61238 JVNDB-2006-003504 Takeshi Kanno libharu2 の hpdf_page_operator.c におけるバッファオーバーフローの脆弱性 Takeshi Kanno Haru Free PDF Library (libharu2) の hpdf_page_operator.c の HPDF_Page_Circle 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-6146 22248 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003504.html  View