CVE-2002-1235
NoneCVSS
—
EPSS
15.1%
Published
Nov 4, 2002
CISA due date
—
The record
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | heimdal | 0 | 0.4e-22 |
| Debian:11 | krb5 | 0 | 1.2.6-2 |
| Debian:12 | heimdal | 0 | 0.4e-22 |
| Debian:12 | krb5 | 0 | 1.2.6-2 |
| Debian:13 | heimdal | 0 | 0.4e-22 |
| Debian:13 | krb5 | 0 | 1.2.6-2 |
| Debian:3.0 | heimdal | 0 | 0.4e-7.woody.5 |
| Debian:3.0 | krb4 | 0 | 1.1-8-2.2 |
| Debian:3.0 | krb5 | 0 | 1.2.4-5woody3 |
Related vulnerabilities
- CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre… Also affects heimdal
- CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… Also affects heimdal
- CVE-2024-37371 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads… Also affects krb5
- CVE-2024-37370 In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra… Also affects krb5
- CVE-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in… Also affects krb5
- CVE-2024-26458 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. Also affects krb5
- CVE-2020-28196 MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded… Also affects krb5
- CVE-2016-3119 The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the… Also affects krb5