CVE-2001-1323

Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*

History

02 Feb 2021, 17:59

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-120
CPE cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:* cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=98826223517788&w=2 - (BUGTRAQ) http://marc.info/?l=bugtraq&m=98826223517788&w=2 - Issue Tracking, Third Party Advisory
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2001-060.html - Patch, Vendor Advisory (REDHAT) http://www.redhat.com/support/errata/RHSA-2001-060.html - Third Party Advisory
References (IMMUNIX) http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01 - (IMMUNIX) http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01 - Third Party Advisory
References (CONFIRM) http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt - (CONFIRM) http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt - Patch, Vendor Advisory

Information

Published : 2001-05-16 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2001-1323

Mitre link : CVE-2001-1323

CVE.ORG link : CVE-2001-1323


JSON object : View

Products Affected

mit

  • kerberos_5
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')