CVE-2002-1235: Buffer Overflow
The kadmserin function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1235?
CVE-2002-1235 is classified as a high severity vulnerability that allows for potential unauthorized access.
How do I fix CVE-2002-1235?
To fix CVE-2002-1235, upgrade to the latest versions of affected software including MIT Kerberos 5 versions above 1.2.6 and KTH Kerberos versions above 1.2.1.
Who is affected by CVE-2002-1235?
CVE-2002-1235 affects systems using MIT Kerberos 5 versions up to 1.2.6 and KTH Kerberos versions up to 1.2.1 or 0.5.1 when compiled with Kerberos 4 support.
What is the impact of CVE-2002-1235?
The impact of CVE-2002-1235 includes potential unauthorized access and manipulation of accounts due to inadequate security in the kadm_ser_in function.
What versions of Debian are affected by CVE-2002-1235?
Debian 3.0 is affected by CVE-2002-1235 due to its inclusion of vulnerable versions of the Kerberos software.