CVE-2008-0947

Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.

🔗 References (74)

• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html
• cve@mitrehttp://marc.info/?l=bugtraq&m=130497213107107&w=2
• cve@mitrehttp://secunia.com/advisories/29424
• cve@mitrehttp://secunia.com/advisories/29428
• cve@mitrehttp://secunia.com/advisories/29435
• cve@mitrehttp://secunia.com/advisories/29438
• cve@mitrehttp://secunia.com/advisories/29451
• cve@mitrehttp://secunia.com/advisories/29457
• cve@mitrehttp://secunia.com/advisories/29462
• cve@mitrehttp://secunia.com/advisories/29464
• cve@mitrehttp://secunia.com/advisories/29516
• cve@mitrehttp://secunia.com/advisories/29663
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200803-31.xml
• cve@mitrehttp://securityreason.com/securityalert/3752
• cve@mitrehttp://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html