FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1189

This CVE name corresponds to:

Entered	Topic
2004-12-21	krb5 -- heap buffer overflow vulnerability in libkadm5srv

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1189 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1189
Phase	Assigned(20041213)

Description

The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.

References

Source	Reference
CONFIRM	http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt
BUGTRAQ	20041220 MITKRB5-SA-2004-004: heap overflow in libkadm5srv
APPLE	APPLE-SA-2005-08-15
APPLE	APPLE-SA-2005-08-17
CONECTIVA	CLA-2005:917
MANDRAKE	MDKSA-2004:156
REDHAT	RHSA-2005:012
REDHAT	RHSA-2005:045
TRUSTIX	2004-0069
BUGTRAQ	20050110 [USN-58-1] MIT Kerberos server vulnerability
OVAL	oval:org.mitre.oval:def:11911
XF	kerberos-libkadm5srv-bo(18621)