CVE-2011-0282: mit kerberos

EPSS trend

Probability

3.48%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.48% on 20-09-2026

20-09-202620-10-2026

EPSS score

3.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

22 links

www.mandriva.com/security/advisories?name=MDVSA-2011:025Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/archive/1/520102/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/46397Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/46271VDB EntryX Refsource BID
www.vupen.com/english/advisories/2011/0347VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/43260Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2011/0333VDB EntryX Refsource VUPENVendor Advisory
www.redhat.com/support/errata/RHSA-2011-0199.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/43273Third Party AdvisoryX Refsource SECUNIAVendor Advisory
web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-002.txtX Refsource CONFIRMVendor Advisory

Show all 22 references

www.securityfocus.com/archive/1/516299/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securitytracker.com/id?1025037VDB EntryX Refsource SECTRACK
lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.htmlVendor AdvisoryX Refsource SUSE
www.vmware.com/security/advisories/VMSA-2011-0012.htmlX Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2011:024Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2011/0464VDB EntryX Refsource VUPEN
securityreason.com/securityalert/8073Third Party AdvisoryX Refsource SREASON
exchange.xforce.ibmcloud.com/vulnerabilities/65323VDB EntryX Refsource XF
www.vupen.com/english/advisories/2011/0330VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/43275Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2011-0200.htmlVendor AdvisoryX Refsource REDHAT
security-tracker.debian.org/tracker/CVE-2011-0282Advisory

Related vulnerabilities

CVE-2018-20217alpinekrb5+321.42%7y ago26-12-2018 20:00A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5709alpinekrb5+32.05%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2018-5710alpinekrb5+31.80%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVE-2003-0060debiankrb5+15.56%23y ago01-02-2003 05:00Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.

All vulnerabilities inkerberos kerberos_5

CVE-2011-0282: mit kerberos

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References