Unscored severity · published Oct 28, 2002
CVE-2002-1225
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access
–
CVSS
4.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
Heimdal · Kth
0.3e; 0.4a; 0.4b; 0.4c; 0.4d; 0.4e · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1225
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1225
marc.info
http://marc.info/?l=bugtraq&m=103341355708817&w=2
marc.info
http://marc.info/?l=bugtraq&m=103462479621246&w=2
Patch
http://www.debian.org/security/2002/dsa-178
Vendor Advisory
http://www.iss.net/security_center/static/10116.php
Patch
http://www.securityfocus.com/bid/5729
More from Heimdal
–
CVE-2006-0677
telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a…
–
CVE-2006-0582
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credentials, allows attackers to overwrite arbitrary files and…
–
CVE-2004-0371
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a…
–
CVE-2002-1226
Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other…
–
CVE-2002-0754
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to…