NVD

Id
48160  
Name
CVE-2009-0845  
Description
The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the reqFlags field in a negTokenInit token.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-03-27  
Modified Date
2010-08-21  
Seq
2009-0845  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241944 48160 CVE-2009-0845 http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6402  View
241945 48160 CVE-2009-0845 APPLE-SA-2009-05-12  View
241946 48160 CVE-2009-0845 oval:org.mitre.oval:def:10044  View
241947 48160 CVE-2009-0845 oval:org.mitre.oval:def:6449  View
241948 48160 CVE-2009-0845 GLSA-200904-09  View
241949 48160 CVE-2009-0845 http://src.mit.edu/fisheye/browse/krb5/trunk/src/lib/gssapi/spnego/spnego_mech.c?r1=21875&r2=22084  View
241950 48160 CVE-2009-0845 http://src.mit.edu/fisheye/changelog/krb5/?cs=22084  View
241951 48160 CVE-2009-0845 256728  View
241952 48160 CVE-2009-0845 http://support.apple.com/kb/HT3549  View
241953 48160 CVE-2009-0845 http://support.avaya.com/elmodocs2/security/ASA-2009-142.htm  View
241954 48160 CVE-2009-0845 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047180.html  View
241955 48160 CVE-2009-0845 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5047181.html  View
241956 48160 CVE-2009-0845 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-001.txt  View
241957 48160 CVE-2009-0845 http://wiki.rpath.com/Advisories:rPSA-2009-0058  View
241958 48160 CVE-2009-0845 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0058  View
241959 48160 CVE-2009-0845 http://www-01.ibm.com/support/docview.wss?uid=swg21396120  View
241960 48160 CVE-2009-0845 VU#662091  View
241961 48160 CVE-2009-0845 MDVSA-2009:082  View
241962 48160 CVE-2009-0845 RHSA-2009:0408  View
241963 48160 CVE-2009-0845 20090407 MITKRB5-SA-2009-001: multiple vulnerabilities in SPNEGO, ASN.1 decoder [CVE-2009-0844 CVE-2009-0845 CVE-2009-0847]  View
241964 48160 CVE-2009-0845 20090407 rPSA-2009-0058-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
241965 48160 CVE-2009-0845 34257  View
241966 48160 CVE-2009-0845 1021867  View
241967 48160 CVE-2009-0845 USN-755-1  View
241968 48160 CVE-2009-0845 TA09-133A  View
241969 48160 CVE-2009-0845 ADV-2009-0847  View
241970 48160 CVE-2009-0845 ADV-2009-0976  View
241971 48160 CVE-2009-0845 ADV-2009-1057  View
241972 48160 CVE-2009-0845 ADV-2009-1106  View
241973 48160 CVE-2009-0845 ADV-2009-1297  View
241974 48160 CVE-2009-0845 ADV-2009-2248  View
241975 48160 CVE-2009-0845 kerberos-spnego-dos(49448)  View
241976 48160 CVE-2009-0845 FEDORA-2009-2834  View
241977 48160 CVE-2009-0845 FEDORA-2009-2852  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40183 JVNDB-2009-001189 MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性 MIT Kerberos の lib/gssapi/spnego/spnego_mech.c 内の spnego_gss_accept_sec_context 関数には、SPENGO を使用している場合に negTokenInit トークンの reqFlags フィールド内にある ContextFlags データの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-0845 38276 CVE-2009-0845 48160 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001189.html 2009-03-27 2010-12-07 View