NVD

Id
11267  
Name
CVE-2011-5000  
Description
The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-04-05  
Modified Date
2012-07-21  
Seq
2011-5000  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62353 11267 CVE-2011-5000 RHSA-2012:0884  View
62354 11267 CVE-2011-5000 20110801 Useless OpenSSH resources exhausion bug via GSSAPI  View
62355 11267 CVE-2011-5000 http://site.pi3.com.pl/adv/ssh_1.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26289 JVNDB-2012-001996 OpenSSH の gss-serv.c 内の ssh_gssapi_parse_ename 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 OpenSSH の gss-serv.c 内の ssh_gssapi_parse_ename 関数には、gssapi-with-mic 認証が有効な場合、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2011-5000 52907 CVE-2011-5000 11267 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001996.html 2012-04-05 2012-04-06 View