CVE

Id
43017  
CVE No.
CVE-2010-0433  
Status
Candidate  
Description
The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469068 43017 CVE-2010-0433 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
469069 43017 CVE-2010-0433 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
469070 43017 CVE-2010-0433 MLIST:[dovecot] 20100219 segfault - (imap  View
469071 43017 CVE-2010-0433 pop3)-login during nessus scan  View
469072 43017 CVE-2010-0433 URL:http://www.mail-archive.com/dovecot@dovecot.org/msg26224.html  View
469073 43017 CVE-2010-0433 MLIST:[oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433  View
469074 43017 CVE-2010-0433 URL:http://www.openwall.com/lists/oss-security/2010/03/03/5  View
469075 43017 CVE-2010-0433 MLIST:[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released  View
469076 43017 CVE-2010-0433 URL:https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html  View
469077 43017 CVE-2010-0433 MLIST:[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released  View
469078 43017 CVE-2010-0433 URL:https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html  View
469079 43017 CVE-2010-0433 MISC:http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7  View
469080 43017 CVE-2010-0433 CONFIRM:http://cvs.openssl.org/chngview?cn=19374  View
469081 43017 CVE-2010-0433 CONFIRM:http://www.openssl.org/news/changelog.html  View
469082 43017 CVE-2010-0433 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=567711  View
469083 43017 CVE-2010-0433 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=569774  View
469084 43017 CVE-2010-0433 CONFIRM:http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc  View
469085 43017 CVE-2010-0433 CONFIRM:https://kb.bluecoat.com/index?page=content&id=SA50  View
469086 43017 CVE-2010-0433 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
469087 43017 CVE-2010-0433 CONFIRM:http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
469088 43017 CVE-2010-0433 FEDORA:FEDORA-2010-5744  View
469089 43017 CVE-2010-0433 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html  View
469090 43017 CVE-2010-0433 FEDORA:FEDORA-2010-5357  View
469091 43017 CVE-2010-0433 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html  View
469092 43017 CVE-2010-0433 HP:HPSBUX02517  View
469093 43017 CVE-2010-0433 URL:http://marc.info/?l=bugtraq&m=127128920008563&w=2  View
469094 43017 CVE-2010-0433 HP:HPSBUX02531  View
469095 43017 CVE-2010-0433 URL:http://marc.info/?l=bugtraq&m=127557640302499&w=2  View
469096 43017 CVE-2010-0433 HP:SSRT100058  View
469097 43017 CVE-2010-0433 URL:http://marc.info/?l=bugtraq&m=127128920008563&w=2  View
469098 43017 CVE-2010-0433 HP:SSRT100108  View
469099 43017 CVE-2010-0433 URL:http://marc.info/?l=bugtraq&m=127557640302499&w=2  View
469100 43017 CVE-2010-0433 MANDRIVA:MDVSA-2010:076  View
469101 43017 CVE-2010-0433 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:076  View
469102 43017 CVE-2010-0433 OVAL:oval:org.mitre.oval:def:9856  View
469103 43017 CVE-2010-0433 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9856  View
469104 43017 CVE-2010-0433 OVAL:oval:org.mitre.oval:def:12260  View
469105 43017 CVE-2010-0433 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12260  View
469106 43017 CVE-2010-0433 OVAL:oval:org.mitre.oval:def:6718  View
469107 43017 CVE-2010-0433 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6718  View
469108 43017 CVE-2010-0433 SECUNIA:39461  View
469109 43017 CVE-2010-0433 URL:http://secunia.com/advisories/39461  View
469110 43017 CVE-2010-0433 SECUNIA:39932  View
469111 43017 CVE-2010-0433 URL:http://secunia.com/advisories/39932  View
469112 43017 CVE-2010-0433 SECUNIA:42724  View
469113 43017 CVE-2010-0433 URL:http://secunia.com/advisories/42724  View
469114 43017 CVE-2010-0433 SECUNIA:42733  View
469115 43017 CVE-2010-0433 URL:http://secunia.com/advisories/42733  View
469116 43017 CVE-2010-0433 SECUNIA:43311  View
469117 43017 CVE-2010-0433 URL:http://secunia.com/advisories/43311  View
469118 43017 CVE-2010-0433 VUPEN:ADV-2010-0839  View
469119 43017 CVE-2010-0433 URL:http://www.vupen.com/english/advisories/2010/0839  View
469120 43017 CVE-2010-0433 VUPEN:ADV-2010-0933  View
469121 43017 CVE-2010-0433 URL:http://www.vupen.com/english/advisories/2010/0933  View
469122 43017 CVE-2010-0433 VUPEN:ADV-2010-0916  View
469123 43017 CVE-2010-0433 URL:http://www.vupen.com/english/advisories/2010/0916  View
469124 43017 CVE-2010-0433 VUPEN:ADV-2010-1216  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35421 JVNDB-2010-001201 Linux Kernel の The ip6_dst_lookup_tail 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/ipv6/ip6_output.c における The ip6_dst_lookup_tail 関数には、IPv6 TUN ネットワークインターフェースおよび大量の近接ホストを含む環境が適切に処理されないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0437 43017 7.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001201.html  View