Mit: >> Kerberos 5 >> 1.0 Security Vulnerabilities
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score
10.0
EPSS Score
0.329
Published
2002-11-04
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
CVSS Score
7.5
EPSS Score
0.021
Published
2001-05-16
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.
CVSS Score
5.0
EPSS Score
0.026
Published
2000-06-09
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.
CVSS Score
5.0
EPSS Score
0.026
Published
2000-06-09
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function.
CVSS Score
5.0
EPSS Score
0.034
Published
2000-06-09
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
CVSS Score
5.0
EPSS Score
0.013
Published
2000-06-09
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
CVSS Score
5.0
EPSS Score
0.031
Published
2000-06-09
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.11
Published
2000-05-16
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.085
Published
2000-05-16
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.085
Published
2000-05-16