PT-2008-1051 · Mit · Rpc Library+4

Jeff Altman + 1 · Published 2008-03-18 · Updated 2020-01-21 · CVE-2008-0948

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.2.2 through 1.3

Description The issue is related to a buffer overflow in the RPC library used by libgssrpc and kadmind. This can be triggered when the system's unistd.h does not define the FD SETSIZE macro, allowing remote attackers to cause a denial of service or possibly execute arbitrary code by opening a large number of file descriptors. Multiple vulnerabilities in the krb5 package may lead to breaches in confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations For versions 1.2.2 through 1.3, consider updating to a version after 1.3 to resolve the issue. As a temporary workaround, consider restricting the number of open file descriptors to prevent the buffer overflow. Avoid using the RPC library in sensitive operations until the issue is resolved.

Fix

Buffer Overflow

Improper Initialization

Weakness Enumeration

CWE-119

CWE-665

Related Identifiers

BDU:2015-06278

CVE-2008-0948

RHSA-2008:0181

Affected Products

Mit Kerberos 5

Rpc Library

Kadmind

Krb5

Libgssrpc

References · 31

• http://redhat.com/support/errata/RHSA-2008-0181.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-0948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0948 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-0948 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=130497213107107&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06278 · Security Note
• http://secunia.com/advisories/29428 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-0948 · Vendor Advisory
• http://secunia.com/advisories/30535 · Note
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html · Note
• http://securityfocus.com/archive/1/489762/100/0/threaded · Note
• http://vmware.com/security/advisories/VMSA-2008-0009.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41274 · Note
• http://secunia.com/advisories/29663 · Note