CVE-2004-0434

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.htmlBroken Link, Third Party Advisory
http://marc.info/?l=bugtraq&m=108386148126457&w=2Mailing List
http://security.gentoo.org/glsa/glsa-200405-23.xmlThird Party Advisory
http://www.debian.org/security/2004/dsa-504Broken Link, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16071Third Party Advisory, VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.htmlBroken Link, Third Party Advisory
http://marc.info/?l=bugtraq&m=108386148126457&w=2Mailing List
http://security.gentoo.org/glsa/glsa-200405-23.xmlThird Party Advisory
http://www.debian.org/security/2004/dsa-504Broken Link, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16071Third Party Advisory, VDB Entry

Timeline

Published: Jul 7, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-04353.6Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INV CVE-2004-04375.0Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial o CVE-2004-044410.0Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 20 CVE-2004-04452.6The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, N CVE-2004-04477.2Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a CVE-2004-044810.0Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code vi CVE-2004-045010.0Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary CVE-2004-045110.0Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows re CVE-2004-04522.6Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allo CVE-2004-04537.2Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulat CVE-2004-04547.2Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.CVE-2004-04557.2Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.