CVE-2011-0285: mit kerberos_5 Improper Input Validation
Vulnerability summary
CVE-2011-0285 is a high (CVSS 10.0) Improper Input Validation vulnerability in mit kerberos_5. EPSS estimates a 20.77% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 15-04-2011PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
20.77%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 20.77% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Redhat8 products
- krb5< 0:1.8.2-3.el6_0.7
- krb5-debuginfo< 0:1.8.2-3.el6_0.7
- krb5-devel< 0:1.8.2-3.el6_0.7
- krb5-libs< 0:1.8.2-3.el6_0.7
- krb5-pkinit-openssl< 0:1.8.2-3.el6_0.7
Debian1 product
- krb5< 1.9.1+dfsg-1
Mit1 product
- kerberos_51.7 | 1.7.1 | 1.8 | 1.8.1 | 1.8.2 | 1.8.3 | 1.9
3 vendors · 10 products
References
26 links- web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txtX Refsource CONFIRMPatchVendor AdvisoryARTICLE
Show all 26 references
- lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.htmlVendor AdvisoryX Refsource FEDORA
- krbdev.mit.edu/rt/Ticket/Display.html?id=6899X Refsource CONFIRM
bugs.debian.org/cgi-bin/bugreport.cgi?bug=621726X Refsource CONFIRM