PT-2006-1087 · Mit · Kerberos 5+1
Andrew Korty
·
Publicado
2006-12-31
·
Atualizado
2024-06-15
·
CVE-2006-6143
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
mit-krb5 versions prior to 1.5.2
Kerberos 5 versions 1.4 through 1.4.4
Kerberos 5 versions 1.5 through 1.5.1
Description:
The issue affects the RPC library in Kerberos 5, which can be exploited remotely, potentially leading to a denial of service or arbitrary code execution. This could compromise the confidentiality, integrity, and availability of protected information.
Recommendations:
For mit-krb5 versions prior to 1.5.2, update to version 1.5.2 or later.
For Kerberos 5 versions 1.4 through 1.4.4, update to a version outside of this range.
For Kerberos 5 versions 1.5 through 1.5.1, update to a version outside of this range.
As a temporary workaround, consider restricting access to the RPC library in Kerberos 5 to minimize the risk of exploitation.
Correção
Access of Uninitialized Pointer
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Kerberos 5
Mit-Krb5