CVE - CVE-2006-5989

CVE-ID
CVE-2006-5989	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1017348 URL:http://securitytracker.com/id?1017348 MISC:21214 URL:http://www.securityfocus.com/bid/21214 MISC:23023 URL:http://secunia.com/advisories/23023 MISC:23251 URL:http://secunia.com/advisories/23251 MISC:23681 URL:http://secunia.com/advisories/23681 MISC:23820 URL:http://secunia.com/advisories/23820 MISC:ADV-2006-4633 URL:~~http://www.vupen.com/english/advisories/2006/4633~~ (Obsolete source) MISC:DSA-1247 URL:http://www.debian.org/security/2007/dsa-1247 MISC:GLSA-200701-14 URL:http://security.gentoo.org/glsa/glsa-200701-14.xml MISC:MDKSA-2006:218 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:218~~ (Obsolete source) MISC:RHSA-2006:0746 URL:http://www.redhat.com/support/errata/RHSA-2006-0746.html MISC:apache-modauthkerb-offbyone-bo(30456) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/30456 MISC:https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=136650 URL:https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=136650 MISC:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206736 URL:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206736 MISC:oval:org.mitre.oval:def:10051 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10051
Assigning CNA
Red Hat, Inc.
Date Record Created
20061120	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061120)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)