CVE-2002-1225 Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kth heimdal | = 0.3e | No fix listed |
| kth heimdal | = 0.4a | No fix listed |
| kth heimdal | = 0.4b | No fix listed |
| kth heimdal | = 0.4c | No fix listed |
| kth heimdal | = 0.4d | No fix listed |
| kth heimdal | = 0.4e | No fix listed |
| debian/heimdal(Debian:12) | < 0.4e-21 | 0.4e-21 |
| debian/heimdal(Debian:13) | < 0.4e-21 | 0.4e-21 |
| debian/heimdal(Debian:14) | < 0.4e-21 | 0.4e-21 |
References
- SuSE-SA:2002:034 vendor-advisory
- 20021014 GLSA: heimdal mailing-list
- DSA-178 patch vendor-advisory
- heimdal-kf-kfd-bo(10116) vdb-entry vendor-advisory
- 5729 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1225 vendor-advisory