CVE Catalog

CVE-2004-0434

Critical
Published: Translated: NVD NIST

Summary

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, leading to a heap-based buffer overflow.

Risk Assessment

Attackers may remotely gain control over the system, posing a significant security threat to the organization.

Recommendation

It is recommended to update the Heimdal software to the latest version to mitigate this vulnerability.

Original NVD description (English source)

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS