CVE-2004-0371: Medium severity KTH Heimdal vulnerability
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0371?
CVE-2004-0371 is considered a crucial security vulnerability due to its potential for allowing impersonation attacks across cross-realm trust paths.
How do I fix CVE-2004-0371?
To mitigate CVE-2004-0371, upgrade Heimdal to version 0.6.1 or later, or to 0.5.3 for the 0.5.x series.
What versions of Heimdal are affected by CVE-2004-0371?
CVE-2004-0371 affects Heimdal versions 0.4a through 0.6.0 and 0.5.x versions prior to 0.5.3.
What types of attacks can CVE-2004-0371 facilitate?
CVE-2004-0371 can enable remote attackers to impersonate users due to insufficient consistency checks in cross-realm requests.
Is there a patch available for CVE-2004-0371?
Yes, the patch for CVE-2004-0371 is included in the updated releases of Heimdal, specifically versions 0.6.1 and 0.5.3.