Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-0948
HistoryMar 19, 2008 - 12:44 a.m.

CVE-2008-0948

2008-03-1900:44:00
CWE-119
[email protected]
web.nvd.nist.gov
35
mit kerberos
krb5
buffer overflow
rpc library
libgssrpc
kadmind
cve-2008-0948
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.7 High

AI Score

Confidence

High

0.31 Low

EPSS

Percentile

97.0%

JSON

Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably other versions before 1.3, when running on systems whose unistd.h does not define the FD_SETSIZE macro, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering a large number of open file descriptors.

Affected configurations

NVD
Node
mitkerberos_5Match1.2.2
CPENameOperatorVersion
mit:kerberos_5mit kerberos 5eq1.2.2

References

Related

veracode 1
ubuntucve 1
nvd 1
debiancve 1
cvelist 1
prion 1
cert 1
securityvulns 3
openvas 11
centos 2
oraclelinux 1
redhat 1
nessus 7
suse 1
vmware 2
veracode
veracode
Buffer Overflow
2023-10-11 04:58:28
ubuntucve
ubuntucve
CVE-2008-0948
2008-03-19 00:00:00
nvd
nvd
CVE-2008-0948
2008-03-19 00:44:00
debiancve
debiancve
CVE-2008-0948
2008-03-19 00:44:00
cvelist
cvelist
CVE-2008-0948
2008-03-19 00:00:00
prion
prion
Buffer overflow
2008-03-19 00:44:00
cert
cert
MIT Kerberos contains array overrun in RPC library used by kadmind
2008-03-18 00:00:00
securityvulns
securityvulns
MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin
2008-03-19 00:00:00
MIT Kerberos multiple security vulnerabilities
2008-03-19 00:00:00
VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-05 00:00:00
openvas
openvas
RedHat Update for krb5 RHSA-2008:0181-01
2009-03-06 00:00:00
RedHat Update for krb5 RHSA-2008:0181-01
2009-03-06 00:00:00
CentOS Update for krb5 CESA-2008:0181-01 centos2 i386
2009-02-27 00:00:00
centos
centos
krb5 security update
2008-03-18 20:48:28
krb5 security update
2008-03-18 22:49:36
oraclelinux
oraclelinux
Critical: krb5 security update
2008-03-18 00:00:00
redhat
redhat
(RHSA-2008:0181) Critical: krb5 security update
2008-03-18 00:00:00
nessus
nessus
SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 5082)
2008-03-19 00:00:00
openSUSE 10 Security Update : krb5 (krb5-5081)
2008-03-19 00:00:00
Oracle Linux 3 : krb5 (ELSA-2008-0181)
2013-07-12 00:00:00
suse
suse
remote code execution in krb5
2008-03-19 10:19:46
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.7 High

AI Score

Confidence

High

0.31 Low

EPSS

Percentile

97.0%

JSON
Related for CVE-2008-0948
veracode1ubuntucve1nvd1debiancve1cvelist1prion1cert1securityvulns3openvas11centos2oraclelinux1redhat1nessus7suse1vmware2