FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-0283

This CVE name corresponds to:

Entered	Topic
2010-04-19	krb5 -- multiple denial of service vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-0283 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-0283
Phase	Assigned(20100112)

Description

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request.

References

Source	Reference
BUGTRAQ	20100216 MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service
CONFIRM	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt
CONFIRM	http://support.apple.com/kb/HT4188
APPLE	APPLE-SA-2010-06-15-1
FEDORA	FEDORA-2010-1722
UBUNTU	USN-916-1
BID	38260
SECTRACK	1023593
SECUNIA	38598
SECUNIA	39023
SECUNIA	40220
VUPEN	ADV-2010-1481