CVE-2011-0281: Medium severity kerberos vulnerability
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0281?
CVE-2011-0281 is classified as a denial of service vulnerability that can impact the availability of services using MIT Kerberos 5.
How do I fix CVE-2011-0281?
The best way to mitigate CVE-2011-0281 is to upgrade to a patched version of MIT Kerberos 5 that addresses this vulnerability.
Which versions of MIT Kerberos are affected by CVE-2011-0281?
CVE-2011-0281 affects MIT Kerberos 5 versions 1.6.x through 1.9.
What kind of attack does CVE-2011-0281 enable?
CVE-2011-0281 allows remote attackers to exploit a denial of service by causing file descriptor exhaustion and daemon hang.
Is CVE-2011-0281 related to the LDAP backend in MIT Kerberos?
Yes, CVE-2011-0281 specifically impacts the Key Distribution Center (KDC) when used with an LDAP backend.