CVE-2011-0285: Input Validation

Published Apr 15, 2011

Updated

The processchpwrequest function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.

Affected Software

7 affected components

MIT Kerberos 5=1.7

MIT Kerberos 5=1.7.1

MIT Kerberos 5=1.8

MIT Kerberos 5=1.8.1

MIT Kerberos 5=1.8.2

MIT Kerberos 5=1.8.3

MIT Kerberos 5=1.9

Remediation

Patch Available

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txt

Event History

Apr 15, 2011

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0285?

CVE-2011-0285 is considered a critical vulnerability due to its potential for arbitrary code execution and denial of service.

How do I fix CVE-2011-0285?

To fix CVE-2011-0285, you should upgrade to a patched version of MIT Kerberos 5, specifically versions later than 1.9.

What software is affected by CVE-2011-0285?

CVE-2011-0285 affects MIT Kerberos 5 versions 1.7 through 1.9.

Can CVE-2011-0285 be exploited remotely?

Yes, CVE-2011-0285 can be exploited remotely by sending crafted requests that trigger the vulnerability.

What can happen if CVE-2011-0285 is exploited?

If exploited, CVE-2011-0285 can lead to arbitrary code execution or a crash of the kadmind daemon.