CVE-2004-1189: Buffer Overflow
The addtohistory function in svrprincipal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1189?
CVE-2004-1189 is considered a moderate severity vulnerability due to the potential for an array index out-of-bounds error.
How do I fix CVE-2004-1189?
To fix CVE-2004-1189, you should upgrade to a version of MIT Kerberos 5 greater than 1.3.5.
What versions of MIT Kerberos 5 are affected by CVE-2004-1189?
CVE-2004-1189 affects all versions of MIT Kerberos 5 up to and including 1.3.5.
What is the impact of CVE-2004-1189?
The impact of CVE-2004-1189 may include authentication failures or unauthorized access due to improper password history management.
Is CVE-2004-1189 applicable to Kerberos implementations other than MIT Kerberos 5?
CVE-2004-1189 is specific to MIT Kerberos 5 and does not directly apply to other Kerberos implementations.