CVE-2006-6143: Critical severity MIT Kerberos 5 vulnerability
The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6143?
CVE-2006-6143 has a severity level that indicates it can lead to a denial of service (DoS) attack.
What software versions are affected by CVE-2006-6143?
CVE-2006-6143 affects MIT Kerberos 5 versions 1.4 through 1.4.4 and 1.5 through 1.5.1, as well as certain versions of Ubuntu Linux.
How do I fix CVE-2006-6143?
To fix CVE-2006-6143, you should upgrade to a patched version of MIT Kerberos 5 that is not affected by this vulnerability.
What are the potential impacts of exploiting CVE-2006-6143?
Exploiting CVE-2006-6143 could allow remote attackers to crash the system by triggering a denial of service condition.
Is CVE-2006-6143 specific to certain operating systems?
CVE-2006-6143 is specifically noted to affect MIT Kerberos implementations on systems like Ubuntu Linux versions 6.06 and 6.10.