KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability

BID:4592

Info

KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability

Bugtraq ID: 4592
Class: Boundary Condition Error
CVE: CVE-2002-0600
Remote: Yes
Local: No
Published: Apr 24 2002 12:00AM
Updated: Jul 11 2009 12:46PM
Credit: Vulnerability discovery credited to Marcell Fodor <[email protected]>.
Vulnerable: Luke Mewburn lukemftp 1.5
+ S.u.S.E. Firewall Adminhost VPN
+ S.u.S.E. Linux Admin-CD for Firewall
+ S.u.S.E. Linux Connectivity Server
+ S.u.S.E. Linux Database Server 0
 + S.u.S.E. Linux Enterprise Server for S/390
+ S.u.S.E. Linux Live-CD for Firewall
+ S.u.S.E. SuSE eMail Server III
+ SuSE Linux 8.0
+ SuSE Linux 7.3
+ SuSE Linux 7.2
+ SuSE Linux 7.1
+ SuSE Linux 7.0
+ SuSE Linux 6.4
+ SuSE SUSE Linux Enterprise Server 7
 KTH Kerberos 4 1.1.1
- Debian Linux 2.2 sparc
 - Debian Linux 2.2 powerpc
 - Debian Linux 2.2 IA-32
 - Debian Linux 2.2 arm
 - Debian Linux 2.2 alpha
 - Debian Linux 2.2 68k
 - Digital (Compaq) TRU64/DIGITAL UNIX 5.0
- Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g
 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 f
 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 e
 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 d
 - Digital (Compaq) TRU64/DIGITAL UNIX 4.0 a
 - FreeBSD FreeBSD 4.5
- FreeBSD FreeBSD 4.4
- FreeBSD FreeBSD 4.3
- FreeBSD FreeBSD 4.2
- HP HP-UX 11.20
- HP HP-UX 11.11
- HP HP-UX 11.0
- HP HP-UX 10.20
- IBM AIX 4.3.3
- IBM AIX 4.3.2
- IBM AIX 4.3.1
- IBM AIX 4.3
- IBM AIX 4.2.1
- IBM AIX 4.2
- IBM AIX 4.1.5
- IBM AIX 4.1.4
- IBM AIX 4.1.3
- IBM AIX 4.1.2
- IBM AIX 4.1.1
- IBM AIX 4.1
- Mandriva Linux Mandrake 8.2
- Mandriva Linux Mandrake 8.1 ia64
 - Mandriva Linux Mandrake 8.1
- Mandriva Linux Mandrake 8.0 ppc
 - Mandriva Linux Mandrake 8.0
- NetBSD NetBSD 1.5.2
- NetBSD NetBSD 1.5.1
- NetBSD NetBSD 1.5
- NetBSD NetBSD 1.4.3
- NetBSD NetBSD 1.4.2
- NetBSD NetBSD 1.4.1
- NetBSD NetBSD 1.4
- OpenBSD OpenBSD 2.9
- OpenBSD OpenBSD 2.8
- OpenBSD OpenBSD 2.7
- OpenBSD OpenBSD 2.6
- Redhat Linux 7.2 ia64
 - Redhat Linux 7.2 i386
 - Redhat Linux 7.2 alpha
 - Redhat Linux 7.1 ia64
 - Redhat Linux 7.1 i386
 - Redhat Linux 7.0 sparc
 - Redhat Linux 7.0 i386
 - Redhat Linux 7.0 alpha
 - Redhat Linux 6.2 sparc
 - Redhat Linux 6.2 i386
 - Redhat Linux 6.2 alpha
 - SGI IRIX 6.5.15 m
 - SGI IRIX 6.5.15 f
 - SGI IRIX 6.5.14 m
 - SGI IRIX 6.5.14 f
 - SGI IRIX 6.5.13 m
 - SGI IRIX 6.5.13 f
 - SGI IRIX 6.5.12 m
 - SGI IRIX 6.5.12 f
 - SGI IRIX 6.5.11 m
 - SGI IRIX 6.5.11 f
 - Sun Solaris 2.5.1 _x86
 - Sun Solaris 2.5.1
- Sun Solaris 8_x86
 - Sun Solaris 8_sparc
 - Sun Solaris 7.0_x86
 - Sun Solaris 7.0
 - Sun Solaris 2.6_x86
 - Sun Solaris 2.6
 - Sun Solaris 2.5_x86
 - Sun Solaris 2.5
 - Sun Solaris 2.4
 - Sun SunOS 4.1.4
- Sun SunOS 4.1.3
- Sun SunOS 4.1.2
- Sun SunOS 4.1.1
- Sun SunOS 4.1
- SuSE Linux 7.3 sparc
 - SuSE Linux 7.3 ppc
 - SuSE Linux 7.3 i386
 - SuSE Linux 7.2 i386
 - SuSE Linux 7.1 x86
 - SuSE Linux 7.1 sparc
 - SuSE Linux 7.1 ppc
 - SuSE Linux 7.1 alpha
 KTH Kerberos 4 1.0.4
KTH Kerberos 4 1.0.3
KTH Kerberos 4 1.0.2
Not Vulnerable:

Discussion

KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability

This problem affects the ftp client source included with the Kerberos4 eBones implementation maintained and distributed by KTH. It is also part of the default installation of SuSE Linux. It is freely available. This vulnerability affects only Unix and Linux operating systems.

Under some circumstances, it may be possible to take advantage of a heap overflow in the ftp client. Insufficient bounds checking is in place when processing the server response to a client passive mode request. A server response of excessive length may result in heap overflow condition.

Solution / Fix

KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability

Solution:
Fixes available.


Luke Mewburn lukemftp 1.5

References

KTH eBones Kerberos4 FTP Client Passive Mode Heap Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report