Lucene search

K
cve[email protected]CVE-2004-0523
HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0523

2004-08-1804:00:00
web.nvd.nist.gov
42
cve-2004-0523
buffer overflows
mit kerberos 5
nvd
security issue

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

AI Score

Confidence

High

0.261 Low

EPSS

Percentile

96.8%

Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

Affected configurations

NVD
Node
mitkerberosMatch1.0
OR
mitkerberosMatch1.0.8
OR
mitkerberosMatch1.2.2.beta1
OR
mitkerberos_5Match1.0
OR
mitkerberos_5Match1.0.6
OR
mitkerberos_5Match1.1
OR
mitkerberos_5Match1.1.1
OR
mitkerberos_5Match1.2
OR
mitkerberos_5Match1.2beta1
OR
mitkerberos_5Match1.2beta2
OR
mitkerberos_5Match1.2.1
OR
mitkerberos_5Match1.2.2
OR
mitkerberos_5Match1.2.3
OR
mitkerberos_5Match1.2.4
OR
mitkerberos_5Match1.2.5
OR
mitkerberos_5Match1.2.6
OR
mitkerberos_5Match1.2.7
OR
mitkerberos_5Match1.3
OR
mitkerberos_5Match1.3alpha1
OR
mitkerberos_5Match1.3.3
OR
sgipropackMatch2.4
OR
sgipropackMatch3.0
OR
sunseamMatch1.0
OR
sunseamMatch1.0.1
OR
sunseamMatch1.0.2
OR
tinysofatinysofa_enterprise_serverMatch1.0
OR
tinysofatinysofa_enterprise_serverMatch1.0_u1
Node
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86
OR
sunsunosMatch5.8

References

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

AI Score

Confidence

High

0.261 Low

EPSS

Percentile

96.8%