CVE-2008-0062 KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via c...
CriticalCVSS 9.8
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | <= 1.6.3 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| fedoraproject fedora | = 7 | No fix listed |
| fedoraproject fedora | = 8 | No fix listed |
| debian/krb5(Debian:12) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
| debian/krb5(Debian:13) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
| debian/krb5(Debian:14) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
References
- docs.info.apple.com broken-link
- APPLE-SA-2008-03-18 mailing-list vendor-advisory
- SUSE-SA:2008:016 mailing-list vendor-advisory
- SSRT100495 mailing-list vendor-advisory
- 29420 broken-link third-party-advisory
- 29423 broken-link third-party-advisory
- 29424 broken-link third-party-advisory
- 29428 broken-link third-party-advisory
- 29435 broken-link third-party-advisory
- 29438 broken-link third-party-advisory
- 29450 broken-link third-party-advisory
- 29451 broken-link third-party-advisory
- 29457 broken-link third-party-advisory
- 29462 broken-link third-party-advisory
- 29464 broken-link third-party-advisory
- 29516 broken-link third-party-advisory
- 29663 broken-link third-party-advisory
- 30535 broken-link third-party-advisory
- support.novell.com broken-link
- support.novell.com broken-link
- web.mit.edu third-party-advisory
- wiki.rpath.com broken-link
- wiki.rpath.com broken-link
- DSA-1524 third-party-advisory vendor-advisory
- GLSA-200803-31 third-party-advisory vendor-advisory
- VU#895609 third-party-advisory us-government-resource
- MDVSA-2008:069 broken-link vendor-advisory
- MDVSA-2008:070 broken-link vendor-advisory
- MDVSA-2008:071 broken-link vendor-advisory
- RHSA-2008:0164 broken-link vendor-advisory
- RHSA-2008:0180 broken-link vendor-advisory
- RHSA-2008:0181 broken-link vendor-advisory
- RHSA-2008:0182 broken-link vendor-advisory
- 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc broken-link mailing-list third-party-advisory vdb-entry
- 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation broken-link mailing-list third-party-advisory vdb-entry
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues broken-link mailing-list third-party-advisory vdb-entry
- 28303 broken-link third-party-advisory vdb-entry
- 1019626 broken-link third-party-advisory vdb-entry
- USN-587-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2008-0922 broken-link vdb-entry
- ADV-2008-0924 broken-link vdb-entry
- ADV-2008-1102 broken-link vdb-entry
- ADV-2008-1744 broken-link vdb-entry
- krb5-kdc-code-execution(41275) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9496 broken-link signature vdb-entry
- FEDORA-2008-2637 mailing-list vendor-advisory
- FEDORA-2008-2647 mailing-list vendor-advisory
- Debian Security Tracker CVE-2008-0062 vendor-advisory