PT-2008-2559 · Mit+1 · Mit Kerberos 5+1

Jeff Altman + 1 · Publicado 2008-03-18 · Atualizado 2024-06-15 · CVE-2008-0947

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.4 through 1.6.3

Description The issue is related to a buffer overflow in the RPC library used by libgssrpc and kadmind. This allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.

Recommendations For versions 1.4 through 1.6.3, update to a version that contains a fix for this issue to prevent remote code execution.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0947

DSA-1524-1

OPENSUSE-SU-2024:10899-1

RHSA-2008:0164

RHSA-2008_0164

Produtos afetados

Mit Kerberos 5

Red Hat

Referências · 70

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10984 · Nota
• https://suse.com/security/cve/CVE-2008-0947 · Nota
• https://suse.com/security/cve/CVE-2018-5729 · Nota
• http://secunia.com/advisories/29435 · Nota
• https://suse.com/security/cve/CVE-2007-5972 · Nota
• https://suse.com/security/cve/CVE-2017-11368 · Nota
• https://suse.com/security/cve/CVE-2007-5894 · Nota
• http://security.gentoo.org/glsa/glsa-200803-31.xml · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0164 · Nota
• https://suse.com/security/cve/CVE-2021-36222 · Nota
• http://securityfocus.com/archive/1/489762/100/0/threaded · Nota
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00537.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-0063 · Nota
• https://suse.com/security/cve/CVE-2007-2442 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41273 · Nota