Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kerberos密钥分发中心远程拒绝服务攻击漏洞
Vulnerability Description
Kerberos是美国麻省理工学院(MIT)开发的一套网络认证协议,它采用客户端/服务器结构,并且客户端和服务器端均可对对方进行身份认证(即双重验证),可防止窃听、防止replay攻击等。 MIT Kerberos密钥分发中心(Key Distribution Center)对部分恶意'Ticket'授权服务请求处理不正确,远程攻击者可以利用这个漏洞对KDC进行拒绝服务攻击。 在验证后部分特殊针对KDC的请求可导致KDC废弃NULL指针而崩溃,此漏洞在KDC不正确配置的情况下更容易产生。恶意远程或本地用户
CVSS Information
N/A
Vulnerability Type
N/A