PT-2011-1161 · Mit+1 · Mit Kerberos 5+1

Kevin Longfellow · Published 2011-02-08 · Updated 2024-06-15 · CVE-2011-0281

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.6.x through 1.9

Description The issue allows remote attackers to cause a denial of service, specifically file descriptor exhaustion and daemon hang, when an LDAP backend is used in the Key Distribution Center (KDC) implementation. This can be triggered by a principal name that includes a backslash escape sequence, such as a sequence. Multiple vulnerabilities in the mit-krb5 package may lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For versions 1.6.x through 1.9, update to a version newer than 1.9, specifically 1.9.2-r1 or later, to resolve the issue. As a temporary workaround, consider restricting the use of backslash escape sequences in principal names to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-310

Related Identifiers

BDU:2015-09426

CVE-2011-0281

OPENSUSE-SU-2024:10004-1

RHSA-2011:0199

RHSA-2011:0200

RHSA-2011_0199

RHSA-2011_0200

Affected Products

Mit Kerberos 5

Red Hat

References · 89

• http://mandriva.com/security/advisories?name=MDVSA-2011:024 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:025 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-0281 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0281 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0200.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0347 · Vendor Advisory
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txt · Vendor Advisory
• http://secunia.com/advisories/43260 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0199.html · Vendor Advisory
• http://secunia.com/advisories/43275 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0333 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0281 · Vendor Advisory
• http://secunia.com/advisories/43273 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0200.html · Vendor Advisory