QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-0281

Back to search

CVE-2011-0281

Published: Feb 10, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a principal name that triggers use of a backslash escape sequence, as demonstrated by a \n sequence.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDVSA-2011:025
vendor-advisory
x_refsource_MANDRIVA
46265
vdb-entry
x_refsource_BID
46397
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0347
vdb-entry
x_refsource_VUPEN
43260
third-party-advisory
x_refsource_SECUNIA
ADV-2011-0333
vdb-entry
x_refsource_VUPEN
RHSA-2011:0199
vendor-advisory
x_refsource_REDHAT
43273
third-party-advisory
x_refsource_SECUNIA
1025037
vdb-entry
x_refsource_SECTRACK
SUSE-SR:2011:004
vendor-advisory
x_refsource_SUSE
MDVSA-2011:024
vendor-advisory
x_refsource_MANDRIVA
ADV-2011-0464
vdb-entry
x_refsource_VUPEN
8073
third-party-advisory
x_refsource_SREASON
ADV-2011-0330
vdb-entry
x_refsource_VUPEN
43275
third-party-advisory
x_refsource_SECUNIA
RHSA-2011:0200
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now