exploits , vulnerabilities , articles , Multiple Vendor kadmind Remote Buffer Overflow Vulnerability

Title	Multiple Vendor kadmind Remote Buffer Overflow Vulnerability
Published	2002-10-21-12:00AM
Updated	2003-01-14-02:33PM
Class	Boundary Condition Error
CVE	CAN-2002-1235
Remote	Yes
Local	No
Credit	Discovery of vulnerability credited to Johan Danielsson and Love Hornquist-Astrand. Discovery is also credited to Tom Yu and Sam Hartman of MIT.
Vulnerable	OpenBSD OpenBSD 3.2 OpenBSD OpenBSD 3.1 OpenBSD OpenBSD 3.0 NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 MIT Kerberos 5 1.2.6 MIT Kerberos 5 1.2.5 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Linux Mandrake 9.0 RedHat Linux 8.0 RedHat Linux 8.0 i386 Turbolinux Home Turbolinux Turbolinux 10 F... Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux Server 8.0 Wirex Immunix OS 7 MIT Kerberos 5 1.2.4 Debian Linux 3.0 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc RedHat Linux 7.3 RedHat Linux 7.3 i386 MIT Kerberos 5 1.2.3 Conectiva Linux 8.0 MIT Kerberos 5 1.2.2 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc MandrakeSoft Multi Network Firewall 2.0 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 MIT Kerberos 5 1.2.1 MIT Kerberos 5 1.2 MIT Kerberos 5 1.1.1 RedHat Linux 6.2 RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 MIT Kerberos 5 1.1 MIT Kerberos 5 1.0.6 MIT Kerberos 5 1.0 MIT Kerberos 4 4.0 MIT Kerberos 4 1.1 MIT Kerberos 4 1.0 KTH Heimdal 0.21 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc KTH Heimdal 0.5 Gentoo Linux 1.2 Gentoo Linux 1.4 _rc1 KTH Heimdal 0.4 e FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 4.1 FreeBSD FreeBSD 4.1.1 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.6 RELEASE S.u.S.E. Linux 8.0 KTH Heimdal 0.4 d S.u.S.E. Linux 7.3 KTH Heimdal 0.4 c KTH Heimdal 0.4 b KTH Heimdal 0.4 a KTH Heimdal 0.3 e S.u.S.E. Linux 7.2 KTH eBones 1.2 IBM PSSP 3.5 IBM PSSP 3.4 IBM PSSP 3.2 IBM PSSP 3.1.1 FreeBSD FreeBSD 4.7 FreeBSD FreeBSD 4.6 FreeBSD FreeBSD 4.5 FreeBSD FreeBSD 4.4 FreeBSD FreeBSD 4.3 FreeBSD FreeBSD 4.2 FreeBSD FreeBSD 4.1 FreeBSD FreeBSD 4.0
Not Vulnerable	KTH Heimdal 0.5.1 FreeBSD FreeBSD 5.0 KTH eBones 1.2.1 IBM AIX 5.1 IBM AIX 4.3.3 IBM AIX 4.3.2 IBM AIX 4.3.1 IBM AIX 4.3 IBM AIX 4.2 IBM AIX 4.1 IBM AIX 4.0
Code	There are rumors of an exploit for this vulnerability circulating in the wild.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities