SecuritySpace - CVE-2013-1415

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-1415

Description: The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.

Test IDs: 1.3.6.1.4.1.25623.1.1.4.2013.0558.1

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-1415
http://www.mandriva.com/security/advisories?name=MDVSA-2013:157
http://secunia.com/advisories/55040
SuSE Security Announcement: openSUSE-SU-2013:0523 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-03/msg00090.html

CVE ID:	CVE-2013-1415
Description:	The pkinit_check_kdc_pkid function in plugins/preauth/pkinit/pkinit_crypto_openssl.c in the PKINIT implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed KRB5_PADATA_PK_AS_REQ AS-REQ request.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2013.0558.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1415 http://www.mandriva.com/security/advisories?name=MDVSA-2013:157 http://secunia.com/advisories/55040 SuSE Security Announcement: openSUSE-SU-2013:0523 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-03/msg00090.html