CVE-2018-5730 Security feature bypass in n/a
Authenticated kadmin users can bypass DN container checks in LDAP Kerberos databases, potentially escalating privileges or circumventing security controls.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-5730?
CVE-2018-5730 is a low-severity vulnerability in Debian Debian Linux, published on 6 Mar 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
Weakness: CWE-90
Which versions are affected by CVE-2018-5730?
It affects 6 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Mit Kerberos 5, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2018-5730?
Apply the vendor's patch.
Is CVE-2018-5730 being exploited?
There is no known exploitation of CVE-2018-5730 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2018-5730, GHSA-cmm2-4q45-jpgh, UBUNTU-CVE-2018-5730.