CVE-2006-5989
mod auth kerb mod auth kerb: no CVSS score yet. EPSS 4.0% chance of exploitation in the next 30 days.
Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.
- EPSS
- 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mod_auth_kerb:mod_auth_kerb