Intrusion PreventionMIT.Kerberos.5.Principal.Name.Buffer.Overflow
Description
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
Affected Products
MIT Kerberos 5 (krb5) 1.3.3 and earlier.
Impact
Remote code execution.
Recommended Actions
This issue has been addressed in krb5-1.3.4.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:MIT. Kerberos5. Principal. Name. Buffer. Overflow:MIT. Kerberos. 5. Principal. Name. Buffer. Overflow |
References
SA11753| ID | 14658 |
| Created | Jun 21, 2007 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2004-0523 |
| Exploit Prediction Score | 26.14% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, BSD, Solaris |
| Affected App | Other |