PT-2004-1525 · Heimdal · Heimdal

Published 2004-04-06 · Updated 2017-07-11 · CVE-2004-0371

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Heimdal versions 0.5.x through 0.5.2 Heimdal versions 0.6.x through 0.6.0

Description The issue is related to improper consistency checks for cross-realm requests, allowing remote attackers with control of a realm to impersonate others in the cross-realm trust path.

Recommendations For Heimdal versions 0.5.x through 0.5.2, update to version 0.5.3 to resolve the issue. For Heimdal versions 0.6.x through 0.6.0, update to version 0.6.1 to resolve the issue.

Fix

Related Identifiers

CVE-2004-0371

DSA-476

Affected Products

Heimdal

References · 10

• ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0371 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0371 · Vendor Advisory
• http://debian.org/security/2004/dsa-476 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0371 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0371 · Vendor Advisory
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200404-09.xml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15701 · Note
• http://pdc.kth.se/heimdal/advisory/2004-04-01 · Note