NuytsTech Security

CVE-2010-0629

by ·

Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.

Date published : 2010-04-07

http://www.securityfocus.com/bid/39247

http://www.securityfocus.com/archive/1/510566/100/0/threaded

Tags: