CVE-2008-0063
19.03.2008, 10:44
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."Enginsight
| Vendor | Product | Version |
|---|---|---|
| mit | kerberos_5 | 𝑥 ≤ 1.6.3 |
| apple | mac_os_x | 𝑥 < 10.4.11 |
| apple | mac_os_x | 10.5.0 ≤ 𝑥 < 10.5.2 |
| apple | mac_os_x_server | 𝑥 < 10.4.11 |
| apple | mac_os_x_server | 10.5.0 ≤ 𝑥 < 10.5.2 |
| opensuse | opensuse | 10.2 |
| opensuse | opensuse | 10.3 |
| suse | linux | 10.1 |
| debian | debian_linux | 3.1 |
| debian | debian_linux | 4.0 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 6.10 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References