Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Link | Tags |
---|---|
http://www.cert.org/advisories/CA-2000-11.html | third party advisory us government resource |
http://ciac.llnl.gov/ciac/bulletins/k-051.shtml | third party advisory broken link government resource |
http://www.securityfocus.com/bid/1338 | third party advisory vdb entry |
http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html | broken link mailing list |
http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt | patch vendor advisory |