CVE-2002-1235

Description

The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 32.92% Top 5%

Vendor Advisory netbsd.org Vendor Advisory linux-mandrake.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory com.br Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory mit.edu Vendor Advisory mit.edu Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=103564944215101&w=2	third party advisory mailing list
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-026.txt.asc	third party advisory vendor advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-073.php	third party advisory vendor advisory
http://marc.info/?l=bugtraq&m=103582805330339&w=2	third party advisory mailing list
http://marc.info/?l=bugtraq&m=103539530729206&w=2	third party advisory mailing list
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-002-kadm4.txt	vendor advisory
http://www.debian.org/security/2002/dsa-185	third party advisory vendor advisory
http://web.mit.edu/kerberos/www/advisories/2002-002-kadm4_attacksig.txt	vendor advisory
http://marc.info/?l=bugtraq&m=103582517126392&w=2	third party advisory mailing list
http://www.debian.org/security/2002/dsa-183	third party advisory vendor advisory
http://www.iss.net/security_center/static/10430.php	vdb entry third party advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000534	third party advisory vendor advisory
http://www.cert.org/advisories/CA-2002-29.html	us government resource third party advisory patch
http://www.debian.org/security/2002/dsa-184	third party advisory patch vendor advisory
http://www.pdc.kth.se/heimdal/	third party advisory
http://www.kb.cert.org/vuls/id/875073	third party advisory us government resource
http://www.redhat.com/support/errata/RHSA-2002-242.html	third party advisory vendor advisory
http://archives.neohapsis.com/archives/bugtraq/2002-10/0399.html	third party advisory mailing list
http://www.securityfocus.com/bid/6024	patch vendor advisory vdb entry third party advisory

Frequently Asked Questions

What is the severity of CVE-2002-1235?: CVE-2002-1235 has been scored as a critical severity vulnerability.
How to fix CVE-2002-1235?: To fix CVE-2002-1235, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2002-1235 being actively exploited in the wild?: It is possible that CVE-2002-1235 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~33% probability that this vulnerability will be exploited by malicious actors in the next 30 days.