Vulnerability in Mit Kerberos
CVE-2004-0523
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
EPSS: 0.117 (95.6th percentile) — read the EPSS interpretation.
Affected products
- Mit Kerberos — versions 1.0, 1.0.8, 1.2.2.beta1
- Mit Kerberos_5 — versions 1.0, 1.0.6, 1.1
- Sgi Propack — versions 2.4, 3.0
- Sun Seam — versions 1.0, 1.0.1, 1.0.2
- Sun Solaris — versions 8.0, 9.0
- Sun Sunos — versions 5.8
- Tinysofa Tinysofa_enterprise_server — versions 1.0, 1.0_u1
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
- cve@mitre.org (vdb-entry, x_refsource_XF)