CVE-2002-1235

Severity

99%

Complexity

99%

Confidentiality

165%

The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

First reported 22 years ago

2002-11-04 05:00:00

Last updated 5 years ago

2020-01-21 16:47:00

Affected Software

Mit Kerberos 5 -

Debian Debian Linux 3.0

3.0

References

NetBSD-SA2002-026

Third Party Advisory

20021027 KRB5-SORCERER2002-10-27 Security Update

Third Party Advisory

CLA-2002:534

Third Party Advisory

20021023 MITKRB5-SA-2002-002: Buffer overflow in kadmind4

Mailing List, Third Party Advisory

20021026 Updated: MITKRB5-SA-2002-002: Buffer overflow in kadmind4

Mailing List, Third Party Advisory

20021028 GLSA: krb5

Mailing List, Third Party Advisory

20021027 Re: Buffer overflow in kadmind4

Mailing List, Third Party Advisory

http://web.mit.edu/kerberos/www/advisories/2002-002-kadm4_attacksig.txt

Vendor Advisory

http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-002-kadm4.txt

Vendor Advisory

CA-2002-29

Patch, Third Party Advisory, US Government Resource

DSA-183

Third Party Advisory

DSA-184

Patch, Third Party Advisory

DSA-185

Third Party Advisory

kerberos-kadmind-bo(10430)

Third Party Advisory

VU#875073

Third Party Advisory, US Government Resource

MDKSA-2002:073

Third Party Advisory

http://www.pdc.kth.se/heimdal/

Third Party Advisory

RHSA-2002:242

Third Party Advisory

6024

Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.