Unrated severityNVD Advisory· Published Apr 15, 2011· Updated Jun 16, 2026
CVE-2011-0285
CVE-2011-0285
Description
The process_chpw_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 frees an invalid pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted request that triggers an error condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.9:*:*:*:*:*:*:*
- (no CPE)range: >=1.7, <=1.9
Patches
Vulnerability mechanics
References
18- web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-004.txtnvdPatchVendor Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvd
- krbdev.mit.edu/rt/Ticket/Display.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2011-April/058181.htmlnvd
- osvdb.org/71789nvd
- secunia.com/advisories/44125nvd
- secunia.com/advisories/44181nvd
- secunia.com/advisories/44196nvd
- securityreason.com/securityalert/8200nvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2011-0447.htmlnvd
- www.securityfocus.com/archive/1/517484/100/0/threadednvd
- www.securityfocus.com/bid/47310nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2011/0936nvd
- www.vupen.com/english/advisories/2011/0986nvd
- www.vupen.com/english/advisories/2011/0997nvd
- hermes.opensuse.org/messages/8086843nvd
News mentions
0No linked articles in our index yet.