CVE-1999-1296: Buffer Overflow
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRBCONF environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Kerberos IV compatibility librariesfrom your environment.Uninstall or disable the Kerberos IV compatibility libraries where IV compatibility is not required so Kerberos V cannot load the vulnerable IV compatibility code.
- Configuration
Ensure processes that run with elevated privileges do not inherit a KRB_CONF set by untrusted users. Unset KRB_CONF for privilege-elevating processes or set it to a system-owned, non-writable configuration file (owned by root) so local users cannot supply a malicious file.
Kerberos (Kerberos V process environment) KRB_CONF environment variable = unset or set to a protected system-owned file path - Compensating control
Mitigate exploitation by preventing untrusted local users from influencing environment variables or running vulnerable privileged binaries. For example, sanitize environment variables before privilege escalation, restrict execution of affected programs to trusted accounts, or run privileged services in isolated/controlled environments.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1296?
CVE-1999-1296 is considered to have high severity due to its potential to allow local users to gain root privileges.
How do I fix CVE-1999-1296?
To fix CVE-1999-1296, ensure that the Kerberos configuration file does not contain long lines and review the environment variable settings related to KRB_CONF.
Which software versions are affected by CVE-1999-1296?
CVE-1999-1296 specifically affects MIT Kerberos 5 version 1.5.2.
Can CVE-1999-1296 be exploited remotely?
No, CVE-1999-1296 requires local access to the system to exploit the vulnerability.
What are the potential consequences of CVE-1999-1296 exploitation?
The exploitation of CVE-1999-1296 can result in unauthorized root access to the vulnerable system.