NVD

Id
51358  
Name
CVE-2009-4212  
Description
Multiple integer underflows in the (1) AES and (2) RC4 decryption functionality in the crypto library in MIT Kerberos 5 (aka krb5) 1.3 through 1.6.3, and 1.7 before 1.7.1, allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by providing ciphertext with a length that is too short to be valid.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-13  
Modified Date
2011-09-06  
Seq
2009-4212  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260445 51358 CVE-2009-4212 APPLE-SA-2010-06-15-1  View
260446 51358 CVE-2009-4212 FEDORA-2010-0503  View
260447 51358 CVE-2009-4212 FEDORA-2010-0515  View
260448 51358 CVE-2009-4212 SSRT100495  View
260449 51358 CVE-2009-4212 oval:org.mitre.oval:def:11272  View
260450 51358 CVE-2009-4212 oval:org.mitre.oval:def:7357  View
260451 51358 CVE-2009-4212 oval:org.mitre.oval:def:8192  View
260452 51358 CVE-2009-4212 275530  View
260453 51358 CVE-2009-4212 1021779  View
260454 51358 CVE-2009-4212 http://support.apple.com/kb/HT4188  View
260455 51358 CVE-2009-4212 http://support.avaya.com/css/P8/documents/100074869  View
260456 51358 CVE-2009-4212 USN-881-1  View
260457 51358 CVE-2009-4212 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-004.txt  View
260458 51358 CVE-2009-4212 DSA-1969  View
260459 51358 CVE-2009-4212 MDVSA-2010:006  View
260460 51358 CVE-2009-4212 37749  View
260461 51358 CVE-2009-4212 1023440  View
260462 51358 CVE-2009-4212 ADV-2010-0096  View
260463 51358 CVE-2009-4212 ADV-2010-0129  View
260464 51358 CVE-2009-4212 ADV-2010-1481  View
260465 51358 CVE-2009-4212 https://bugzilla.redhat.com/show_bug.cgi?id=545015  View
260466 51358 CVE-2009-4212 RHSA-2010:0029  View
260467 51358 CVE-2009-4212 RHSA-2010:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35232 JVNDB-2010-001012 MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性 MIT Kerberos の暗号化ライブラリの AES および RC4 の復号化機能には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-4212 41643 CVE-2009-4212 51358 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001012.html 2010-01-12 2010-12-07 View