CVE-2018-5730

published 2018-03-06

CVE-2018-5730: MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by…

Priority P4 17 low 3.8 CVSS 3.1

AV N AC L PR H UI N S U C L I L A N

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	debian_linux	—	—
debian	krb5	< krb5 1.16.1-1 (bookworm)	krb5 1.16.1-1 (bookworm)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
mit	kerberos_5	>= 5-1.6 < 5-1.21.2	5-1.21.2
mit	krb5	>= 0 < 1.16.1-1	1.16.1-1
mit	krb5	>= 0 < 1.16.1-1	1.16.1-1
mit	krb5	>= 0 < 1.16.1-1	1.16.1-1
mit	krb5	>= 0 < 1.16.1-1	1.16.1-1
redhat	enterprise_linux_desktop	—	—
redhat	enterprise_linux_server	—	—
redhat	enterprise_linux_workstation	—	—

CVSS provenance

nvd v3.1 3.8 LOW CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

nvd v2.0 5.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:N

osv 3.8 LOW

vendor_debian 3.8 LOW

vendor_redhat 3.8 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-90