← Database

CVE-2006-5989

MEDIUM CVSS: 5.0 Published: 2006-11-20 Modified: 2026-06-16

Description

Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service (crash) via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array.

Affected Platforms

Mod Auth Kerb Mod Auth Kerb

Weakness Type

NVD-CWE-Other

References