RPC: MIT Kerberos kadmind Overflow

This signature detects attempts to exploit a known vulnerability in MIT Kerberios kadmind. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server, typically root.

Extended Description

Kerberos 5 'kadmind' (Kerberos Administration Daemon) server is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code with superuser privileges. A successful attack can result in the complete compromise of the application. Failed attempts will likely result in denial-of-service conditions. All 'kadmind' servers run on the master Kerberos server. Since the master server holds the KDC principal and policy database, an attack may not only compromise the affected computer, but could also compromise multiple hosts that use the server for authentication. Kerberos 5 'kadmind' 1.4 through 1.6.2 are vulnerable; third-party applications using the affected RPC library are also affected.

Affected Products

Suse office_server

References

BugTraq: 25534

CVE: CVE-2007-3999

URL: http://securitytracker.com/alerts/2007/Sep/1018647.html

Short Name

RPC:KADMIND-OF

Severity

Critical

Recommended

False

Recommended Action

Drop

RPC: MIT Kerberos kadmind Overflow

Extended Description

Affected Products

References

Found a potential security threat?