Vulnerability Name:

CVE-2006-5989 (CCN-30456)

Assigned:2006-11-13
Published:2006-11-13
Updated:2017-10-11
Summary:Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
CVSS v3 Severity:10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
4.1 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
8.3 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2006-5989

Source: CCN
Type: RHSA-2006-0746
Low: mod_auth_kerb security update

Source: CCN
Type: SA23023
mod_auth_kerb "der_get_oid()" Off-By-One Vulnerability

Source: SECUNIA
Type: UNKNOWN
23023

Source: SECUNIA
Type: UNKNOWN
23251

Source: SECUNIA
Type: UNKNOWN
23681

Source: SECUNIA
Type: UNKNOWN
23820

Source: GENTOO
Type: UNKNOWN
GLSA-200701-14

Source: CCN
Type: SECTRACK ID: 1017348
mod_auth_kerb Off-by-one Overflow Lets Remote Users Deny Service

Source: SECTRACK
Type: UNKNOWN
1017348

Source: CCN
Type: ASA-2006-270
mod_auth_kerb security update (RHSA-2006-0746)

Source: DEBIAN
Type: UNKNOWN
DSA-1247

Source: DEBIAN
Type: DSA-1247
libapache-mod-auth-kerb -- heap overflow

Source: CCN
Type: GLSA-200701-14
Mod_auth_kerb: Denial of Service

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:218

Source: REDHAT
Type: UNKNOWN
RHSA-2006:0746

Source: BID
Type: UNKNOWN
21214

Source: CCN
Type: BID-21214
Apache Mod_Auth_Kerb Off-By-One Denial of Service Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2006-4633

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=136650

Source: CCN
Type: Red Hat Bugzilla Bug 206736
CVE-2006-5989 mod_auth_kerb segfaults when talking to newest KRB5 libs

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=206736

Source: CCN
Type: Red Hat Bugzilla Bug 216482
CVE-2006-5989 mod_auth_kerb segfault with FC6 client

Source: XF
Type: UNKNOWN
apache-modauthkerb-offbyone-bo(30456)

Source: XF
Type: UNKNOWN
apache-modauthkerb-offbyone-bo(30456)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10051

Vulnerable Configuration:Configuration 1:
  • cpe:/a:mod_auth_kerb:mod_auth_kerb:5.0:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:10051
    V
    		Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
    2013-04-29
    oval:org.debian:def:1247
    V
    		heap overflow
    2007-01-08
    oval:com.redhat.rhsa:def:20060746
    P
    		RHSA-2006:0746: mod_auth_kerb security update (Low)
    2006-12-06
    BACK
    mod_auth_kerb mod auth kerb 5.0