CVE-2010-0629
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kerberos是一款广泛使用的强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5（又名krb5）是美国麻省理工学院（MIT）开发的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。 MIT Kerberos 程序'kadmind server_stubs.c'由于引用已释放的内存,存在远程拒绝服务漏洞。在出错的情况下，如接收到了无效的kadmin API版本号，kadmin RPC票根init_
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-0629
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of service (daemon crash) via a request from a kadmin client that sends an invalid API version number.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
MIT Kerberos 程序'kadmind server_stubs.c'远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kerberos是一款广泛使用的强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5（又名krb5）是美国麻省理工学院（MIT）开发的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。 MIT Kerberos 程序'kadmind server_stubs.c'由于引用已释放的内存,存在远程拒绝服务漏洞。在出错的情况下，如接收到了无效的kadmin API版本号，kadmin RPC票根init_
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-0629
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-0629
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-0629 (14)
-
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567052 x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2010:071 vendor-advisory x_refsource_MANDRIVA
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9489 vdb-entry signature x_refsource_OVAL
-
Mailing List Discussions for CVE-2010-0629 (2)
-
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038556.html vendor-advisory x_refsource_FEDORA
-
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html vendor-advisory x_refsource_SUSE
Other References for CVE-2010-0629 (3)
-
http://krbdev.mit.edu/rt/Ticket/Display.html?id=5998 x_refsource_CONFIRM
-
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-003.txt x_refsource_CONFIRM
-
Same Patch Batch · n/a · 2010-04-07 · 11 CVEs total
| CVE-2008-7254 | Ermenegildo_Fiorito Irmin CMS脚本'includes/template-loader.php'目录遍历漏洞 | |
| CVE-2010-1299 | DynPG CMS 多个远程文件包含漏洞 | |
| CVE-2010-1300 | Yamamah脚本'index.php'SQL注入漏洞 | |
| CVE-2010-1301 | Centreon脚本'main.php'SQL注入漏洞 | |
| CVE-2010-1302 | DecryptWeb DW Graphs目录遍历漏洞 | |
| CVE-2010-0400 | Mahara脚本'lib/user.php'SQL注入漏洞 | |
| CVE-2010-1186 | WordPress NextGEN Gallery 'xml/media-rss.php'跨站脚本攻击漏洞 | |
| CVE-2010-1221 | CA XOsoft 'SOAP'请求身份认证和信息泄露漏洞 | |
| CVE-2010-1222 | CA XOsoft 'SOAP'请求身份认证和信息泄露漏洞 | |
| CVE-2010-1223 | CA XOsoft多个远程缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-0629
No comments yet