PT-2004-1635 · Mit · Mit Kerberos 5

Christopher Nebergall + 1 · Published 2004-06-03 · Updated 2020-01-21 · CVE-2004-0523

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.3.3 and earlier

Description The issue concerns multiple buffer overflows in the krb5 aname to localname function, which can be exploited by remote attackers to execute arbitrary code with root privileges.

Recommendations For versions 1.3.3 and earlier, update to a version later than 1.3.3 to resolve the issue.

Fix

Related Identifiers

CVE-2004-0523

DSA-520

RHSA-2004:236

Affected Products

Mit Kerberos 5

References · 23

• https://security-tracker.debian.org/tracker/CVE-2004-0523 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0523 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2004-236.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0523 · Security Note
• ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1 · Vendor Advisory
• http://lwn.net/Articles/88206 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=108619250923790&w=2 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0523 · Vendor Advisory
• http://debian.org/security/2004/dsa-520 · Vendor Advisory
• http://mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:056 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200406-21.xml · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002 · Note