CVE-2009-3295

The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.

• http://secunia.com/advisories/37977Vendor Advisory
• http://securitytracker.com/id?1023392
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txtPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/508622/100/0/threaded
• http://www.securityfocus.com/bid/37486Patch
• http://www.vupen.com/english/advisories/2009/3652Patch, Vendor Advisory
• http://secunia.com/advisories/37977Vendor Advisory
• http://securitytracker.com/id?1023392
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txtPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/508622/100/0/threaded
• http://www.securityfocus.com/bid/37486Patch
• http://www.vupen.com/english/advisories/2009/3652Patch, Vendor Advisory

Published

Dec 29, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-3289The g_file_copy function in glib 2.0 sets the permissions of…7.8
• CVE-2009-3290The kvm_emulate_hypercall function in arch/x86/kvm/x86.c in …
• CVE-2009-3291The php_openssl_apply_verification_policy function in PHP be…
• CVE-2009-3292Unspecified vulnerability in PHP before 5.2.11, and 5.3.x be…
• CVE-2009-3293Unspecified vulnerability in the imagecolortransparent funct…
• CVE-2009-3294The popen API function in TSRM/tsrm_win32.c in PHP before 5.…
• CVE-2009-3296Multiple integer overflows in tiffread.c in CamlImages 2.2 m…
• CVE-2009-3297Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-3298Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote …
• CVE-2009-3299Cross-site scripting (XSS) vulnerability in the resume block…
• CVE-2009-3300Multiple cross-site scripting (XSS) vulnerabilities in the I…
• CVE-2009-3301Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.or…