Kerberos 5 unauthorized root access to KDC host vulnerability [LWN.net]

Package(s):

krb5

CVE #(s):

Created:

August 14, 2002

Updated:

October 29, 2002

Description:

A bug in the Kerberos 5 remote administration service, "kadmind", could be exploited to gain unauthorized root access to a KDC host. It is believed that the attacker needs to be able to authenticate to the kadmin daemon for this attack to be successful.

Felix von Leitner, discovered this potential division by zero bug in code derived from the SunRPC library which is used in many places, including the Kerberos 5 administration system.

Updating now is recommended.

CERT/CC Vulnerability Note VU#192995 Integer overflow in xdr_array() function when deserializing the XDR stream

Alerts:

Gentoo	200210-011	2002-10-28
Conectiva	CLA-2002:515	2002-08-07
Debian	DSA-143-1	2002-08-05

(Log in to post comments)