Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-1999-1296

Overview

Vulnerability Score 7.2 7.2
CVE Id CVE-1999-1296
Last Modified 05 Sep 2008 04:19:11
Published 29 Apr 1997 12:00:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-1999-1296

Summary

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.

Vulnerable Systems

Application

  • Mit Kerberos 5-1.5.2


References

BUGTRAQ - 19970429 vulnerabilities in kerberos


Last Updated: 27 May 2016 10:35:22