CVE-2002-1225

published 2002-10-28

CVE-2002-1225: Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Priority P3 35 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	heimdal	< heimdal 0.4e-21 (bookworm)	heimdal 0.4e-21 (bookworm)
heimdal_project	heimdal	>= 0 < 0.4e-21	0.4e-21
heimdal_project	heimdal	>= 0 < 0.4e-21	0.4e-21
heimdal_project	heimdal	>= 0 < 0.4e-21	0.4e-21
heimdal_project	heimdal	>= 0 < 0.4e-21	0.4e-21
kth	heimdal	—	—
kth	heimdal	—	—
kth	heimdal	—	—
kth	heimdal	—	—
kth	heimdal	—	—
kth	heimdal	—	—

CVSS provenance

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

osv 10.0 CRITICAL

vendor_debian 10.0 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.