CVE-2006-5989

Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message…

published November 20, 2006

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03964 · 90.4th percentile
Published
2006-11-20T21:00Z
EPSS history
Timeline
  • 20 NOV 21:00Z
    Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message…
    cvelistv5