PT-2004-1635 · Mit · Mit Kerberos 5

Christopher Nebergall + 1 · Publicado 2004-06-03 · Atualizado 2020-01-21 · CVE-2004-0523

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.3.3 and earlier

Description The issue concerns multiple buffer overflows in the krb5 aname to localname function, which can be exploited by remote attackers to execute arbitrary code with root privileges.

Recommendations For versions 1.3.3 and earlier, update to a version later than 1.3.3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0523

DSA-520

RHSA-2004:236

Produtos afetados

Mit Kerberos 5

Referências · 23

• https://security-tracker.debian.org/tracker/CVE-2004-0523 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0523 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002 · Nota
• http://redhat.com/support/errata/RHSA-2004-236.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0523 · Nota de Segurança
• ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A724 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10295 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991 · Nota
• http://securityfocus.com/bid/10448 · Nota
• http://lwn.net/Articles/88206 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=108619250923790&w=2 · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc · Aviso do Fabricante