CVE-2011-1527: Input Validation
The kdbldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the isprincipalinrealm, krb5seterrormessage, krb5ldapgetprincipal, and processasreq functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1527?
CVE-2011-1527 has a critical severity as it allows remote attackers to cause a denial of service.
How do I fix CVE-2011-1527?
To fix CVE-2011-1527, it is recommended to upgrade to a patched version of MIT Kerberos 5 that addresses this vulnerability.
In which versions of MIT Kerberos 5 does CVE-2011-1527 exist?
CVE-2011-1527 exists in MIT Kerberos 5 versions 1.9 and 1.9.1.
What impact does CVE-2011-1527 have on systems?
The impact of CVE-2011-1527 is a potential denial of service, leading to crashes of the KDC daemon.
Who are the potential attackers for CVE-2011-1527?
Remote attackers who can perform kinit operations can exploit CVE-2011-1527.