MIT Kerberos KDC Request NULL Pointer Denial Of Service Vulnerability

Bugtraq ID:	46272
Class:	Input Validation Error
CVE:	CVE-2011-0283
Remote:	Yes
Local:	No
Published:	Feb 08 2011 12:00AM
Updated:	Jan 23 2012 11:10PM
Credit:	Zbysek Mraz of Red Hat
Vulnerable:	MIT Kerberos 5 5-1.9 MIT Kerberos 5 1.9 Gentoo Linux
Not Vulnerable:

MIT Kerberos KDC Request NULL Pointer Denial Of Service Vulnerability

MIT Kerberos is prone to a remote denial-of-service vulnerability caused by a NULL-pointer dereference error.

To exploit this issue, an attacker sends a specially crafted request to a vulnerable KDC service.

An attacker can exploit this issue to crash the KDC service, resulting in a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible; this has not been confirmed.

MIT Kerberos KDC Request NULL Pointer Denial Of Service Vulnerability

Attackers can exploit this issue with readily available networking tools.

MIT Kerberos KDC Request NULL Pointer Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


MIT Kerberos 5 1.9

• MIT 2011-002-patch
  http://web.mit.edu/kerberos/advisories/2011-002-patch.txt

MIT Kerberos KDC Request NULL Pointer Denial Of Service Vulnerability

References:

• Kerberos Homepage (MIT)
  
• MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2011-0282 C (Tom Yu )
  
• MIT krb5 Security Advisory 2011-002 (MIT)