NVD

Id
7406  
Name
CVE-2011-0285  
Description
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-14  
Modified Date
2013-07-06  
Seq
2011-0285  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41732 7406 CVE-2011-0285 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726  View
41733 7406 CVE-2011-0285 http://krbdev.mit.edu/rt/Ticket/Display.html?id=6899  View
41734 7406 CVE-2011-0285 FEDORA-2011-5333  View
41735 7406 CVE-2011-0285 8200  View
41736 7406 CVE-2011-0285 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt  View
41737 7406 CVE-2011-0285 MDVSA-2011:077  View
41738 7406 CVE-2011-0285 RHSA-2011:0447  View
41739 7406 CVE-2011-0285 20110413 MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]  View
41740 7406 CVE-2011-0285 47310  View
41741 7406 CVE-2011-0285 1025320  View
41742 7406 CVE-2011-0285 ADV-2011-0936  View
41743 7406 CVE-2011-0285 ADV-2011-0986  View
41744 7406 CVE-2011-0285 ADV-2011-0997  View
41745 7406 CVE-2011-0285 openSUSE-SU-2011:0348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31288 JVNDB-2011-001528 MIT Kerberos 5 の process_chpw_request 関数における任意のコードを実行される脆弱性 MIT Kerberos 5 の kadmind のパスワード変更を扱う process_chpw_request 関数には、不正なポインタを解放するため、任意のコードを実行される、あるいはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0285 48192 CVE-2011-0285 7406 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001528.html 2011-04-14 2011-05-10 View