CyberSec.Space Logo
Back to CVE Browser

CVE-2002-1225

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0890%
EPSS Percentile21.05th
PublishedOct 28, 2002
Last ModifiedApr 16, 2026

Vulnerability Description

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Affected Platforms (CPE)

📦
Kth

Heimdal

= 0.3e
📦
Kth

Heimdal

= 0.4a
📦
Kth

Heimdal

= 0.4b
📦
Kth

Heimdal

= 0.4c
📦
Kth

Heimdal

= 0.4d
📦
Kth

Heimdal

= 0.4e

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=103341355708817&w=2
🔗 http://marc.info/?l=bugtraq&m=103462479621246&w=2
🔗 http://www.debian.org/security/2002/dsa-178
🔗 http://www.iss.net/security_center/static/10116.php
🔗 http://www.securityfocus.com/bid/5729
🔗 http://marc.info/?l=bugtraq&m=103341355708817&w=2
🔗 http://marc.info/?l=bugtraq&m=103462479621246&w=2
🔗 http://www.debian.org/security/2002/dsa-178

Related Vulnerabilities

CVE-2002-123510.0

The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1....

CVE-2007-593910.0

The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before ...

CVE-2002-122610.0

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remo...

CVE-2011-486210.0

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) ...