CVE-2011-1527

The kdb_ldap plugin in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a kinit operation with incorrect string case for the realm, related to the is_principal_in_realm, krb5_set_error_message, krb5_ldap_get_principal, and process_as_req functions.

• CWE-20

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629558
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txtVendor Advisory
• http://www.kb.cert.org/vuls/id/659251US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:159
• http://www.redhat.com/support/errata/RHSA-2011-1379.htmlVendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629558
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2011-006.txtVendor Advisory
• http://www.kb.cert.org/vuls/id/659251US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:159
• http://www.redhat.com/support/errata/RHSA-2011-1379.htmlVendor Advisory

Published

Oct 20, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1521The urllib and urllib2 modules in Python 2.x before 2.7.2 an…
• CVE-2011-1522Multiple SQL injection vulnerabilities in the Doctrine\DBAL\…
• CVE-2011-1523Cross-site scripting (XSS) vulnerability in statusmap.c in s…
• CVE-2011-1524Cross-site scripting (XSS) vulnerability in the management l…
• CVE-2011-1525Heap-based buffer overflow in rvrender.dll in RealNetworks R…
• CVE-2011-1526ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 A…
• CVE-2011-1528The krb5_ldap_lockout_audit function in the Key Distribution…
• CVE-2011-1529The lookup_lockout_policy function in the Key Distribution C…
• CVE-2011-1530The process_tgs_req function in do_tgs_req.c in the Key Dist…
• CVE-2011-1531The webscan component in the Embedded Web Server (EWS) on th…
• CVE-2011-1532Unspecified vulnerability in the SNMP component on the HP Ph…
• CVE-2011-1533Cross-site scripting (XSS) vulnerability on the HP Photosmar…