CVE-2008-0063 The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitiv...
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | <= 1.6.3 | No fix listed |
| apple mac os x | < 10.4.11 | 10.4.11 |
| apple mac os x | >= 10.5.0, < 10.5.2 | 10.5.2 |
| apple mac os x server | < 10.4.11 | 10.4.11 |
| apple mac os x server | >= 10.5.0, < 10.5.2 | 10.5.2 |
| opensuse | = 10.2 | No fix listed |
| opensuse | = 10.3 | No fix listed |
| SUSE linux | = 10.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp1 | No fix listed |
| SUSE linux enterprise server | = 10-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 10-sp1 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| fedoraproject fedora | = 7 | No fix listed |
| fedoraproject fedora | = 8 | No fix listed |
| debian/krb5(Debian:12) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
| debian/krb5(Debian:13) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
| debian/krb5(Debian:14) | < 1.6.dfsg.3~beta1-4 | 1.6.dfsg.3~beta1-4 |
References
- docs.info.apple.com broken-link
- APPLE-SA-2008-03-18 mailing-list vendor-advisory
- SUSE-SA:2008:016 mailing-list vendor-advisory
- 29420 broken-link third-party-advisory vendor-advisory
- 29423 broken-link third-party-advisory vendor-advisory
- 29424 broken-link third-party-advisory vendor-advisory
- 29428 broken-link third-party-advisory vendor-advisory
- 29435 broken-link third-party-advisory vendor-advisory
- 29438 broken-link third-party-advisory vendor-advisory
- 29450 broken-link third-party-advisory vendor-advisory
- 29451 broken-link third-party-advisory vendor-advisory
- 29457 broken-link third-party-advisory vendor-advisory
- 29462 broken-link third-party-advisory vendor-advisory
- 29464 broken-link third-party-advisory vendor-advisory
- 29516 broken-link third-party-advisory vendor-advisory
- 29663 broken-link third-party-advisory vendor-advisory
- 30535 broken-link third-party-advisory vendor-advisory
- support.novell.com broken-link
- support.novell.com broken-link
- web.mit.edu third-party-advisory
- wiki.rpath.com broken-link
- wiki.rpath.com broken-link
- DSA-1524 third-party-advisory vendor-advisory
- GLSA-200803-31 third-party-advisory vendor-advisory
- MDVSA-2008:069 patch third-party-advisory vendor-advisory
- MDVSA-2008:070 patch third-party-advisory vendor-advisory
- MDVSA-2008:071 patch third-party-advisory vendor-advisory
- RHSA-2008:0164 broken-link vendor-advisory
- RHSA-2008:0180 broken-link vendor-advisory
- RHSA-2008:0181 broken-link vendor-advisory
- RHSA-2008:0182 broken-link vendor-advisory
- 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc broken-link mailing-list third-party-advisory vdb-entry
- 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation broken-link mailing-list third-party-advisory vdb-entry
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues broken-link mailing-list third-party-advisory vdb-entry
- 28303 broken-link third-party-advisory vdb-entry
- 1019627 broken-link third-party-advisory vdb-entry
- USN-587-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2008-0922 broken-link vdb-entry vendor-advisory
- ADV-2008-0924 broken-link vdb-entry vendor-advisory
- ADV-2008-1102 broken-link vdb-entry vendor-advisory
- ADV-2008-1744 broken-link vdb-entry vendor-advisory
- krb5-kdc-kerberos4-info-disclosure(41277) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:8916 broken-link signature vdb-entry
- FEDORA-2008-2637 mailing-list vendor-advisory
- FEDORA-2008-2647 mailing-list vendor-advisory
- Debian Security Tracker CVE-2008-0063 vendor-advisory