CVE

Id
6825  
CVE No.
CVE-2002-2443  
Status
Candidate  
Description
schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.  
Phase
Assigned (20130510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
38619 6825 CVE-2002-2443 CONFIRM:http://krbdev.mit.edu/rt/Ticket/Display.html?id=7637  View
38620 6825 CVE-2002-2443 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=962531  View
38621 6825 CVE-2002-2443 CONFIRM:https://github.com/krb5/krb5/commit/cf1a0c411b2668c57c41e9c4efd15ba17b6b322c  View
38622 6825 CVE-2002-2443 DEBIAN:DSA-2701  View
38623 6825 CVE-2002-2443 URL:http://www.debian.org/security/2013/dsa-2701  View
38624 6825 CVE-2002-2443 FEDORA:FEDORA-2013-8113  View
38625 6825 CVE-2002-2443 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106698.html  View
38626 6825 CVE-2002-2443 FEDORA:FEDORA-2013-8212  View
38627 6825 CVE-2002-2443 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105879.html  View
38628 6825 CVE-2002-2443 FEDORA:FEDORA-2013-8219  View
38629 6825 CVE-2002-2443 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105978.html  View
38630 6825 CVE-2002-2443 MANDRIVA:MDVSA-2013:166  View
38631 6825 CVE-2002-2443 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:166  View
38632 6825 CVE-2002-2443 REDHAT:RHSA-2013:0942  View
38633 6825 CVE-2002-2443 URL:http://rhn.redhat.com/errata/RHSA-2013-0942.html  View
38634 6825 CVE-2002-2443 SUSE:openSUSE-SU-2013:1119  View
38635 6825 CVE-2002-2443 URL:http://lists.opensuse.org/opensuse-updates/2013-07/msg00004.html  View
38636 6825 CVE-2002-2443 SUSE:openSUSE-SU-2013:1122  View
38637 6825 CVE-2002-2443 URL:http://lists.opensuse.org/opensuse-updates/2013-07/msg00007.html  View
38638 6825 CVE-2002-2443 UBUNTU:USN-2810-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21268 JVNDB-2013-002843 MIT Kerberos の kadmind におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos 5 (別名 krb5) の kadmind の kpasswd サービス内の schpw.c は、レスポンスを送信する前に UDP パケットを適切に検証しないため、サービス運用妨害 (CPU および帯域幅消費) 状態にされる脆弱性が存在します。 CVE-2002-2443 6825 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002843.html  View