FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-0284

This CVE name corresponds to:

Entered	Topic
2011-04-14	krb5 -- MITKRB5-SA-2011-003, KDC vulnerable to double-free when PKINIT enabled

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2011-0284 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2011-0284
Phase	Assigned(20110103)

Description

Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.

References

Source	Reference
BUGTRAQ	20110315 MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enabled
CONFIRM	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-003.txt
FEDORA	FEDORA-2011-3462
FEDORA	FEDORA-2011-3464
FEDORA	FEDORA-2011-3547
MANDRIVA	MDVSA-2011:048
REDHAT	RHSA-2011:0356
SUSE	SUSE-SR:2011:005
UBUNTU	USN-1088-1
CERT-VN	VU#943220
BID	46881
OSVDB	71183
SECTRACK	1025216
SECUNIA	43783
SECUNIA	43700
SECUNIA	43760
SECUNIA	43881
VUPEN	ADV-2011-0672
VUPEN	ADV-2011-0673
VUPEN	ADV-2011-0680
VUPEN	ADV-2011-0722
VUPEN	ADV-2011-0763
XF	kerberos-perpareerroras-code-execution(66101)