PT-2018-17115 · Mit+4 · Mit-Krb5+4

Laura Pardo · Published 2018-01-06 · Updated 2025-05-05 · CVE-2018-5730

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: MIT krb5 versions 1.6 or later

Description: The issue allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check. This can be done by supplying both a linkdn and containerdn database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

Recommendations: For MIT krb5 versions 1.6 or later, consider restricting the ability to add principals to the LDAP Kerberos database to prevent exploitation of this issue. As a temporary workaround, limit the use of linkdn and containerdn database arguments to minimize the risk of circumventing the DN containership check. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-90

Related Identifiers

ALT-PU-2018-2231

BDU:2026-01433

CESA-2018_3071

CVE-2018-5730

DLA-1643-1

DLA-2771-1

MGASA-2018-0155

OPENSUSE-SU-2019:0139-1

OPENSUSE-SU-2019_0139-1

RHSA-2018:3071

RHSA-2018_3071

SUSE-SU-2018:0846-1

SUSE-SU-2018:0859-1

SUSE-SU-2019:0175-1

Affected Products

Alt Linux

Centos

Mit-Krb5

Red Hat

Suse

References · 46

• https://github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1551082 · Patch
• https://osv.dev/vulnerability/DLA-2771-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0155 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIFUL3CPM4S5TOXTTOCQ3CUZN6XCXUTR · Vendor Advisory
• https://access.redhat.com/errata/RHBA-2019:0327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5730 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-5730 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0859-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5730 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01433 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:0139-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-5730 · Security Note
• https://osv.dev/vulnerability/DLA-1643-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0846-1 · Vendor Advisory