Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability

Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability

Heimdal Kerberos is an implementation of the Kerberos protocol distributed and maintained by the Center for Parallel Computers, KTH. It is open source, and available for Unix and Linux operating systems.

The Heimdal Kerberos Forwarding Daemon does not properly check information sent from a client to a server for the termination of strings. As this information is often passed to additional programs that may be executed with elevated privileges, it could be possible to exploit a buffer overflow in one of these programs.