Name: CVE-2006-6144: Undefined Security Weakness
Creator: Rapid7
Published: 2007-01-10T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2006-6144, CVSS 5.3, EPSS 0.21928

The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers.

CVSS Details

CVSS 3.1 Base Score: 5.3

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Gentoo Linux	—	Upgrade app-crypt/mit-krb5.	Oct 30, 2017	Dec 31, 2006
Suse	—	Upgrade krb5-plugin-preauth-pkinitUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5-x86Upgrade krb5-develUpgrade krb5-32bitUpgrade krb5-apps-clientsUpgrade krb5-apps-serversUpgrade krb5-plugin-preauth-spakeUpgrade krb5Upgrade krb5-plugin-preauth-otpUpgrade krb5-devel-32bitUpgrade krb5-plugin-kdb-ldap	Feb 17, 2015	Jun 28, 2013

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence