cbcvebase.
CVE-2004-0523
published 2004-08-18

CVE-2004-0523: Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

PriorityP345critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
11.67%
95.5th percentile
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
debiankrb5< krb5 1.3.3-2 (bookworm)krb5 1.3.3-2 (bookworm)
mitkerberos——
mitkerberos——
mitkerberos——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkerberos_5——
mitkrb5>= 0 < 1.3.3-21.3.3-2
mitkrb5>= 0 < 1.3.3-21.3.3-2
mitkrb5>= 0 < 1.3.3-21.3.3-2
mitkrb5>= 0 < 1.3.3-21.3.3-2
sgipropack——
sgipropack——
sunseam——

CVSS provenance

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.