CVE-2009-0844
09.04.2009, 00:30
The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mit | kerberos | 5-1.6.3 |
| mit | kerberos_5 | - |
| mit | kerberos_5 | 1.5 |
| mit | kerberos_5 | 1.5.1 |
| mit | kerberos_5 | 1.5.2 |
| mit | kerberos_5 | 1.5.3 |
| mit | kerberos_5 | 1.6 |
| mit | kerberos_5 | 1.6.1 |
| mit | kerberos_5 | 1.6.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| krb5 |
| ||||||||||||||
| krb5-32bit |
| ||||||||||||||
| krb5-client |
| ||||||||||||||
| krb5-devel |
| ||||||||||||||
| krb5-doc |
| ||||||||||||||
| krb5-plugin-kdb-ldap |
| ||||||||||||||
| krb5-plugin-preauth-otp |
| ||||||||||||||
| krb5-plugin-preauth-pkinit |
| ||||||||||||||
| krb5-server |
|
Common Weakness Enumeration
References