CVE-2009-3295

Publicada em 29 dez 2009 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 40%

The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/37977 http://securitytracker.com/id?1023392 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt http://www.securityfocus.com/archive/1/508622/100/0/threaded http://www.securityfocus.com/bid/37486 http://www.vupen.com/english/advisories/2009/3652