Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:KERBEROS:MIT-KRB5-KDC-DOS |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
MIT Kerberos 5 Key Distribution Center Denial of Service |
Release Date |
2015/12/08 |
Update Number |
2585 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: MIT Kerberos 5 Key Distribution Center Denial of Service
This signature detects attempts to exploit a known vulnerability against MIT Kerberos 5 Key Distribution Center. A successful attack can result in a denial-of-service condition.
Extended Description
The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.
Affected Products
- Mit kerberos_5 1.9
- Mit kerberos_5 1.9.1
References
- BugTraq: 50273
- CVE: CVE-2011-1527
- URL: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txt