CVE-2002-1235 The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1,....
HighCVSS 10.0
EPSS 15.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kth kerberos 4 | < 1.2.1 | 1.2.1 |
| kth kerberos 5 | < 0.5.1 | 0.5.1 |
| mit kerberos 5 | >= 1.0, <= 1.2.6 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian/heimdal(Debian:12) | < 0.4e-22 | 0.4e-22 |
| debian/heimdal(Debian:13) | < 0.4e-22 | 0.4e-22 |
| debian/heimdal(Debian:14) | < 0.4e-22 | 0.4e-22 |
| debian/krb5(Debian:12) | < 1.2.6-2 | 1.2.6-2 |
| debian/krb5(Debian:13) | < 1.2.6-2 | 1.2.6-2 |
| debian/krb5(Debian:14) | < 1.2.6-2 | 1.2.6-2 |
References
- 20021027 KRB5-SORCERER2002-10-27 Security Update mailing-list third-party-advisory
- CLA-2002:534 third-party-advisory vendor-advisory
- 20021023 MITKRB5-SA-2002-002: Buffer overflow in kadmind4 mailing-list third-party-advisory
- 20021026 Updated: MITKRB5-SA-2002-002: Buffer overflow in kadmind4 mailing-list third-party-advisory
- 20021028 GLSA: krb5 mailing-list third-party-advisory
- 20021027 Re: Buffer overflow in kadmind4 mailing-list third-party-advisory
- web.mit.edu vendor-advisory
- web.mit.edu vendor-advisory
- CA-2002-29 patch third-party-advisory us-government-resource
- DSA-183 third-party-advisory vendor-advisory
- DSA-184 patch third-party-advisory vendor-advisory
- DSA-185 third-party-advisory vendor-advisory
- kerberos-kadmind-bo(10430) third-party-advisory vdb-entry
- VU#875073 third-party-advisory us-government-resource
- MDKSA-2002:073 third-party-advisory vendor-advisory
- www.pdc.kth.se third-party-advisory
- RHSA-2002:242 third-party-advisory vendor-advisory
- 6024 patch third-party-advisory vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1235 vendor-advisory