Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability
BID:5731
Info
Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability
| Bugtraq ID: | 5731 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1226 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 17 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Vulnerability announced by KTH. |
| Vulnerable: |
KTH Heimdal 0.4 e KTH Heimdal 0.4 d KTH Heimdal 0.4 c KTH Heimdal 0.4 b KTH Heimdal 0.4 a KTH Heimdal 0.3 e Keware Technologies HomeSeer 0.4 e |
| Not Vulnerable: |
KTH Heimdal 0.5 |
Discussion
Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability
Heimdal Kerberos is an implementation of the Kerberos protocol distributed and maintained by the Center for Parallel Computers, KTH. It is open source, and available for Unix and Linux operating systems.
The Heimdal Kerberos Forwarding Daemon does not properly check information sent from a client to a server for the termination of strings. As this information is often passed to additional programs that may be executed with elevated privileges, it could be possible to exploit a buffer overflow in one of these programs.
Heimdal Kerberos is an implementation of the Kerberos protocol distributed and maintained by the Center for Parallel Computers, KTH. It is open source, and available for Unix and Linux operating systems.
The Heimdal Kerberos Forwarding Daemon does not properly check information sent from a client to a server for the termination of strings. As this information is often passed to additional programs that may be executed with elevated privileges, it could be possible to exploit a buffer overflow in one of these programs.
Exploit / POC
Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability
References:
References:
- Heimdal Homepage (KTH)