CVE-2008-0063

 

Published at: - 19-03-2008 11:44

Last modified: - 19-10-2022 04:59

Total changes: - 2

Description

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc-
• http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
• http://docs.info.apple.com/article.html?artnum=307562
• APPLE-SA-2008-03-18-
• MDVSA-2008:070-
• MDVSA-2008:071-
• SUSE-SA:2008:016-
• USN-587-1-
• 29428-Vendor Advisory
• 29438-Vendor Advisory
• http://wiki.rpath.com/Advisories:rPSA-2008-0112
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112
• DSA-1524-
• FEDORA-2008-2637-
• FEDORA-2008-2647-
• GLSA-200803-31-
• MDVSA-2008:069-
• RHSA-2008:0164-
• RHSA-2008:0180-
• RHSA-2008:0181-
• 28303-
• 1019627-
• 29420-Vendor Advisory
• 29435-Vendor Advisory
• 29450-Vendor Advisory
• 29451-Vendor Advisory
• 29457-Vendor Advisory
• 29464-Vendor Advisory
• 29423-Vendor Advisory
• 29462-Vendor Advisory
• 29516-Vendor Advisory
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
• 29663-Vendor Advisory
• 29424-Vendor Advisory
• RHSA-2008:0182-
• http://www.vmware.com/security/advisories/VMSA-2008-0009.html
• 30535-Vendor Advisory
• ADV-2008-0922-Vendor Advisory
• ADV-2008-1744-Vendor Advisory
• ADV-2008-0924-Vendor Advisory
• ADV-2008-1102-Vendor Advisory
• krb5-kdc-kerberos4-info-disclosure(41277)-
• oval:org.mitre.oval:def:8916-
• 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues-
• 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation-

 

Keywords

NVD

 

CVE-2008-0063

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures