Description
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux3.0 – 3.0
- heimdal_project / heimdal0.6.2
References
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/16071
- VENDOR_ADVISORYhttp://www.debian.org/security/2004/dsa-504
- MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html
- MAILING_LISThttp://marc.info/?l=bugtraq&m=108386148126457&w=2
- MISChttp://security.gentoo.org/glsa/glsa-200405-23.xml
- VENDOR_ADVISORYftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc
Updated 23m ago · 8 sources