FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0434

This CVE name corresponds to:

Entered	Topic
2004-05-05	heimdal kadmind remote heap buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0434 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0434
Phase	Assigned(20040503)

Description

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.

References

Source	Reference
BUGTRAQ	20040505 Advisory: Heimdal kadmind version4 remote heap overflow
FULLDISC	20040506 Advisory: Heimdal kadmind version4 remote heap overflow
DEBIAN	DSA-504
FREEBSD	FreeBSD-SA-04:09
GENTOO	GLSA-200405-23
XF	heimdal-kadmind-bo(16071)