PT-2010-1096 · Mit+1 · Mit Kerberos 5+2

Sol Jerome · Published 2010-04-06 · Updated 2024-02-02 · CVE-2010-0629

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.5 through 1.6.3 mit-krb5 versions prior to 1.9.2-r1

Description The issue concerns multiple vulnerabilities in the mit-krb5 package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. A specific vulnerability involves a use-after-free issue in the kadmin/server/server stubs.c file of kadmind, allowing remote authenticated users to cause a denial of service by sending an invalid API version number from a kadmin client.

Recommendations For MIT Kerberos 5 versions 1.5 through 1.6.3, update to a version later than 1.6.3 to resolve the issue. For mit-krb5 versions prior to 1.9.2-r1, update to version 1.9.2-r1 or later to fix the vulnerabilities. As a temporary workaround, consider restricting access to the kadmind service until a patch is applied.

Exploit

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2015-09426

CVE-2010-0629

DSA-2031-1

RHSA-2010:0343

RHSA-2010_0343

Affected Products

Mit Kerberos 5

Red Hat

Mit-Krb5

References · 27

• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 · Exploit
• http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:071 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0629 · Security Note
• http://ubuntu.com/usn/usn-924-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0629 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0629 · Vendor Advisory
• http://securityfocus.com/bid/39247 · Patch
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt · Vendor Advisory
• http://debian.org/security/2010/dsa-2031 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09426 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0343.html · Vendor Advisory