CVE-2004-0523
NoneCVSS
—
EPSS
11.7%
Published
Aug 18, 2004
CISA due date
—
The record
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | krb5 | 0 | 1.3.3-2 |
| Debian:12 | krb5 | 0 | 1.3.3-2 |
| Debian:13 | krb5 | 0 | 1.3.3-2 |
| Debian:3.0 | krb5 | 0 | 1.2.4-5woody5 |
| Red Hat:enterprise_linux:3::as | krb5 | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::as | krb5-debuginfo | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::as | krb5-devel | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::as | krb5-libs | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::as | krb5-server | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::as | krb5-workstation | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5 | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5-debuginfo | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5-devel | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5-libs | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5-server | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::desktop | krb5-workstation | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5 | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5-debuginfo | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5-devel | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5-libs | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5-server | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::es | krb5-workstation | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5 | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5-debuginfo | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5-devel | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5-libs | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5-server | 0 | 0:1.2.7-24 |
| Red Hat:enterprise_linux:3::ws | krb5-workstation | 0 | 0:1.2.7-24 |
Related vulnerabilities
- CVE-2016-3119 The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the… Also affects krb5
- CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… Also affects krb5
- CVE-2011-0285 The process_chpw_request function in schpw.c in the password-changing functionality in… Also affects krb5
- CVE-2010-1320 Double free vulnerability in do_tgs_req.c in the Key Distribution Center (KDC) in MIT… Also affects krb5
- CVE-2009-3295 The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral… Also affects krb5
- CVE-2008-0062 KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message… Also affects krb5
- CVE-2007-3999 Stack-based buffer overflow in the svcauth_gss_validate function in… Also affects krb5
- CVE-2007-2442 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and… Also affects krb5