CVE-2010-0433
Summary
| CVE | CVE-2010-0433 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-03-05 19:30:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:M/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Openssl | Openssl | 0.9.8 | All | All | All |
| Application | Openssl | Openssl | 0.9.8a | All | All | All |
| Application | Openssl | Openssl | 0.9.8b | All | All | All |
| Application | Openssl | Openssl | 0.9.8c | All | All | All |
| Application | Openssl | Openssl | 0.9.8d | All | All | All |
| Application | Openssl | Openssl | 0.9.8e | All | All | All |
| Application | Openssl | Openssl | 0.9.8f | All | All | All |
| Application | Openssl | Openssl | 0.9.8g | All | All | All |
| Application | Openssl | Openssl | 0.9.8h | All | All | All |
| Application | Openssl | Openssl | 0.9.8i | All | All | All |
| Application | Openssl | Openssl | 0.9.8j | All | All | All |
| Application | Openssl | Openssl | 0.9.8k | All | All | All |
| Application | Openssl | Openssl | 0.9.8l | All | All | All |
| Application | Openssl | Openssl | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [Dovecot] segfault - (imap|pop3)-login during nessus scan | af854a3a-2127-422b-91ae-364da2661108 | www.mail-archive.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| VMware vCenter Server 4.1 Update 1 Release Notes | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | |
| [SECURITY] Fedora 11 Update: openssl-0.9.8n-1.fc11 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| Fedora update for openssl - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| '[security bulletin] HPSBUX02517 SSRT100058 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Inform' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| kb.bluecoat.com/index | af854a3a-2127-422b-91ae-364da2661108 | kb.bluecoat.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| cvs.openssl.org/chngview | af854a3a-2127-422b-91ae-364da2661108 | cvs.openssl.org | |
| VMSA-2011-0003 | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| VMware vCenter Server OpenSSL Denial of Service Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| [syslog-ng-announce] syslog-ng Premium Edition 3.0.6a has been released | af854a3a-2127-422b-91ae-364da2661108 | lists.balabit.com | |
| Bug 567711 – Nessus PCI scan segfaults openssl dependent products due to kerberos enabled in openssl | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc | af854a3a-2127-422b-91ae-364da2661108 | aix.software.ibm.com | |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| oss-security - OpenSSL (with KRB5) remote crash - CVE-2010-0433 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| /news/changelog.html | af854a3a-2127-422b-91ae-364da2661108 | www.openssl.org | |
| Bug 569774 – CVE-2010-0433 openssl: crash caused by a missing krb5_sname_to_principal() return value check | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| Security Advisories | Mandriva Linux | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| [SECURITY] Fedora 13 Update: openssl-1.0.0-1.fc13 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| stunnel crashes with weak certificates... could it be OpenSSL? - mailing.openssl.users | Google Groups | af854a3a-2127-422b-91ae-364da2661108 | groups.google.com | |
| [syslog-ng-announce] syslog-ng Premium Edition 3.2.1a has been released | af854a3a-2127-422b-91ae-364da2661108 | lists.balabit.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| '[security bulletin] HPSBUX02531 SSRT100108 rev.1 - HP-UX Running Apache-based Web Server, Remote Den' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| IBM AIX update for OpenSSL - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| [Dovecot] segfault - (imap|pop3)-login during nessus scan | MITRE | www.mail-archive.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.