CVEvulnerability

CVE-2011-0285

10.0 HIGH Published 2011-04-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-04-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Affected configurations

• mit kerberos 5 1.7 • mit kerberos 5 1.7.1 • mit kerberos 5 1.8 • mit kerberos 5 1.8.1 • mit kerberos 5 1.8.2 • mit kerberos 5 1.8.3 • mit kerberos 5 1.9

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References