Buffer overflow in Mit Kerberos 5

CVE-2001-1323

Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.

Vulnerability class: Buffer Overflow

EPSS: 0.040 (89.6th percentile) — read the EPSS interpretation.

Affected products

Mit Kerberos_5
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, Issue Tracking)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_IMMUNIX)