{"schemaVersion":3,"id":"CVE-2006-6143","aliases":["DEBIAN-CVE-2006-6143"],"status":"published","duplicateOf":null,"title":null,"description":"The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.","dates":{"published":"2007-01-10T00:00:00.000Z","modified":"2024-08-07T20:19:34.415Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.08123,"percentile":0.94791,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.20400000000000001,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.07919},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.08123,"percentile":0.94791}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07919,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.08123,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.08123,"percentile":0.94791}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-824","name":"Access of Uninitialized Pointer","description":"The product accesses or uses a pointer that has not been initialized.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/824.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"6.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 6.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.4.4-6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.4-6","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.4","noFixRecorded":false,"fixedIn":null},{"text":"1.4.1","noFixRecorded":false,"fixedIn":null},{"text":"1.4.2","noFixRecorded":false,"fixedIn":null},{"text":"1.4.3","noFixRecorded":false,"fixedIn":null},{"text":"1.4.4","noFixRecorded":false,"fixedIn":null},{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.4 | 1.4.1 | 1.4.2 | 1.4.3 | 1.4.4 | 1.5 | 1.5.1","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":3,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://securitytracker.com/id?1017493","label":"securitytracker.com/id?1017493","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://fedoranews.org/cms/node/2376","label":"fedoranews.org/cms/node/2376","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA","Broken Link"]},{"url":"http://osvdb.org/31281","label":"osvdb.org/31281","hostname":"osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Broken Link"]},{"url":"http://secunia.com/advisories/24966","label":"secunia.com/advisories/24966","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/481564","label":"www.kb.cert.org/vuls/id/481564","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","Patch","US Government Resource"]},{"url":"http://www.ubuntu.com/usn/usn-408-1","label":"www.ubuntu.com/usn/usn-408-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-009B.html","label":"www.us-cert.gov/cas/techalerts/TA07-009B.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","Broken Link","Patch","US Government Resource"]},{"url":"http://secunia.com/advisories/23696","label":"secunia.com/advisories/23696","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html","label":"lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html","hostname":"lists.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=305391","label":"docs.info.apple.com/article.html?artnum=305391","hostname":"docs.info.apple.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/23706","label":"secunia.com/advisories/23706","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:008","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:008","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23903","label":"secunia.com/advisories/23903","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.securityfocus.com/bid/21970","label":"www.securityfocus.com/bid/21970","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/23667","label":"secunia.com/advisories/23667","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200701-21.xml","label":"security.gentoo.org/glsa/glsa-200701-21.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt","label":"web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html","label":"www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html","hostname":"www.openpkg.com","tags":["Vendor Advisory","X Refsource OPENPKG","Broken Link"]},{"url":"http://fedoranews.org/cms/node/2375","label":"fedoranews.org/cms/node/2375","hostname":"fedoranews.org","tags":["Vendor Advisory","X Refsource FEDORA","Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-109A.html","label":"www.us-cert.gov/cas/techalerts/TA07-109A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","Broken Link","US Government Resource"]},{"url":"https://issues.rpath.com/browse/RPL-925","label":"issues.rpath.com/browse/RPL-925","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/23707","label":"secunia.com/advisories/23707","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2007/0111","label":"www.vupen.com/english/advisories/2007/0111","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/456406/100/0/threaded","label":"www.securityfocus.com/archive/1/456406/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/23772","label":"secunia.com/advisories/23772","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/23701","label":"secunia.com/advisories/23701","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","label":"lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List"]},{"url":"http://www.vupen.com/english/advisories/2007/1470","label":"www.vupen.com/english/advisories/2007/1470","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31422","label":"exchange.xforce.ibmcloud.com/vulnerabilities/31422","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-6143","label":"security-tracker.debian.org/tracker/CVE-2006-6143","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10899-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10899-1"]},"timeline":[{"kind":"published","date":"2007-01-10T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T20:19:34.415Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:32:40.124Z","stale":false,"partial":false}}