CVE-2010-0629

Description

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Weakness classification

• CWE-416: Use After Free

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Mailing List
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Mailing List
• cve@mitre.org — Mailing List
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Patch, Vendor Advisory