APP: Kerberos Heap Double Free (2)

This signature detects attempts to exploit a known vulnerability in the Kerberos protocol. A successful attack can lead to remote arbitrary code execution. Note: this signature should not be utilized on a network running Kerberos 5 1.1 or higher.

Extended Description

MIT Kerberos 5 is prone to a remote double-free vulnerability. Remote attackers can trigger this issue prior to any authentication whatsoever. The issue exists in the 'revcauth_common()' helper function. Because of the code path taken in the vulnerable function, exploitation may be hindered. However, attackers may presumably leverage this issue to execute arbitrary code in the context of the affected service. Note that successful exploitation of this issue on a Kerberos Key Distribution Center (KDC) computer may result in the compromise of an entire Kerberos realm.

Affected Products

Mandriva corporate_server

References

BugTraq: 14239

CVE: CVE-2010-1320

URL: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt http://www.juniper.net/security/auto/vulnerabilities/vuln1881.html

Short Name

APP:KERBEROS:DBLFREE-2

Severity

Minor

Recommended

False

Recommended Action

None

APP: Kerberos Heap Double Free (2)

Extended Description

Affected Products

References

Found a potential security threat?