Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability

OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability

by Nikola Strahija on April 23rd, 2002 A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require valid user credentials in versions prior to 2.9.9.


The vulnerability is related to the handling of Kerberos 4 TGT/AFS tokens passed by the client. An unbounded string copy operation may result in a stack overflow if the TGT/token data is malformed.

Remote: Yes

Exploit: http://online.securityfocus.com/data/vulnerabilities/exploits/tgt-x86linux.tar


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »