CVE-2011-0282: Null Pointer Dereference
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (NULL pointer dereference or buffer over-read, and daemon crash) via a crafted principal name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0282?
CVE-2011-0282 has a severity rating that indicates it could lead to denial of service due to a NULL pointer dereference or buffer over-read.
How do I fix CVE-2011-0282?
To fix CVE-2011-0282, upgrade to a patched version of MIT Kerberos 5 that addresses this vulnerability.
What systems are affected by CVE-2011-0282?
CVE-2011-0282 affects MIT Kerberos 5 versions 1.6.x up to 1.9 when using an LDAP backend.
Can CVE-2011-0282 be exploited remotely?
Yes, CVE-2011-0282 can be exploited by remote attackers to cause a daemon crash.
What type of vulnerability is CVE-2011-0282?
CVE-2011-0282 is a denial of service vulnerability resulting from improper handling of crafted principal names.