CVE-2002-1235: debian debian_linux
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2002-1235 is a high (CVSS 10.0) vulnerability in debian debian_linux. EPSS estimates a 15.10% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities.
Timeline
- 25-10-2002PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
15.10%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 15.10% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian4 products
- heimdal< 0.4e-22 | < 0.4e-7.woody.5
- krb4< 1.1-8-2.2
- krb5< 1.2.6-2 | < 1.2.4-5woody3
- debian_linuxEOL3.0
Kth2 products
- kth_kerberos_4< 1.2.1
- kth_kerberos_5< 0.5.1
Mit1 product
- kerberos_5≥ 1.0, ≤ 1.2.6
3 vendors · 7 products
References
19 links- www.linux-mandrake.com/en/security/2002/MDKSA-2002-073.phpVendor AdvisoryX Refsource MANDRAKEThird Party Advisory
Show all 19 references
- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000534Vendor AdvisoryX Refsource CONECTIVAThird Party Advisory
- www.cert.org/advisories/CA-2002-29.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
- www.redhat.com/support/errata/RHSA-2002-242.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- archives.neohapsis.com/archives/bugtraq/2002-10/0399.htmlMailing ListX Refsource BUGTRAQThird Party Advisory