CVE

Id
4127  
CVE No.
CVE-2001-1323  
Status
Candidate  
Description
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.  
Phase
Proposed (20020502)  
Votes
ACCEPT(3) Cole, Cox, Green | MODIFY(1) Frech | NOOP(2) Foat, Wall  
Comments
Frech> XF:kerberos-inject-base64-encode(6454)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19329 4127 CVE-2001-1323 BUGTRAQ:20010426 Security advisory: krb5 ftpd buffer overflows  View
19330 4127 CVE-2001-1323 URL:http://marc.info/?l=bugtraq&m=98826223517788&w=2  View
19331 4127 CVE-2001-1323 IMMUNIX:IMNX-2001-70-022-01  View
19332 4127 CVE-2001-1323 URL:http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01  View
19333 4127 CVE-2001-1323 CONFIRM:http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt  View
19334 4127 CVE-2001-1323 REDHAT:RHSA-2001:060  View

Related JVN