CVE-2010-0283: mit kerberos Improper Input Validation

EPSS trend

Probability

2.41%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

-0.02 pp

From 2.43% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

lists.apple.com/archives/security-announce/2010//Jun/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.securityfocus.com/bid/38260VDB EntryX Refsource BID
www.ubuntu.com/usn/USN-916-1Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2010/1481VDB EntryX Refsource VUPEN
web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txtX Refsource CONFIRMVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-February/035222.htmlVendor AdvisoryX Refsource FEDORA
securitytracker.com/id?1023593VDB EntryX Refsource SECTRACK
support.apple.com/kb/HT4188X Refsource CONFIRM
secunia.com/advisories/40220Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/39023Third Party AdvisoryX Refsource SECUNIA

Show all 13 references

www.securityfocus.com/archive/1/509553/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/38598Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2010-0283Advisory

Related vulnerabilities

CVE-2018-20217alpinekrb5+321.42%7y ago26-12-2018 20:00A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5709alpinekrb5+32.05%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2018-5710alpinekrb5+31.80%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVE-2003-0060debiankrb5+15.56%23y ago01-02-2003 05:00Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.

All vulnerabilities inkerberos kerberos_5

CVE-2010-0283: mit kerberos Improper Input Validation

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References