Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability

Threat level definition

Heimdal Kerberos Forwarding Daemon Zero Terminated String Passing Buffer Overflow Vulnerability

Solution:
NetBSD has released an advisory addressing this issue. All versions of NetBSD, including NetBSD-current source prior to September 10, 2002, contain the vulnerable binary, though the service is not enabled by default. NetBSD has fixed this version vulnerability in the 1.5 version of the source, and the 1.6 branch fix is pending. NetBSD Security has advised users of 1.6 to manually remove the vulnerable binaries after completing a "make build".

Users of Gentoo Linux are advised to upgrade using the following commands:

emerge rsync
emerge heimdal
emerge clean

Updated versions available:

KTH Heimdal 0.3 e

SuSE heimdal-0.3e-83.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec2/heimdal-0.3e-83.i386. rpm

SuSE heimdal-0.3e-83.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/zq1/heimdal-0.3e-83.src.rp m

SuSE heimdal-devel-0.3e-83.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec2/heimdal-devel-0.3e-83 .i386.rpm

SuSE heimdal-lib-0.3e-83.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec1/heimdal-lib-0.3e-83.i 386.rpm

KTH Heimdal 0.4 d

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

SuSE heimdal-0.4d-113.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec2/heimdal-0.4d-113.ppc.r pm

SuSE heimdal-0.4d-113.src.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/zq1/heimdal-0.4d-113.src.rp m

SuSE heimdal-0.4d-132.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/zq1/heimdal-0.4d-132.src.r pm

SuSE heimdal-0.4d-67.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec2/heimdal-0.4d-67.spar c.rpm

SuSE heimdal-0.4d-67.src.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/zq1/heimdal-0.4d-67.src.r pm

SuSE heimdal-devel-0.4d-113.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec2/heimdal-devel-0.4d-113 .ppc.rpm

SuSE heimdal-devel-0.4d-132.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/sec2/heimdal-devel-0.4d-13 2.i386.rpm

SuSE heimdal-devel-0.4d-67.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec2/heimdal-devel-0.4d-6 7.sparc.rpm

SuSE heimdal-lib-0.4d-113.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec1/heimdal-lib-0.4d-113.p pc.rpm

SuSE heimdal-lib-0.4d-67.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec1/heimdal-lib-0.4d-67. sparc.rpm

Keware Technologies HomeSeer 0.4 e

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

KTH Heimdal 0.4 b

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

KTH Heimdal 0.4 c

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

KTH Heimdal 0.4 e

Debian heimdal-docs_0.2l-7.4_all.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-docs_0. 2l-7.4_all.deb

Debian heimdal-docs_0.4e-7.woody.4_all.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-docs_0. 4e-7.woody.4_all.deb

Debian heimdal-kdc_0.2l-7.4_alpha.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_alpha.deb

Debian heimdal-kdc_0.2l-7.4_arm.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_arm.deb

Debian heimdal-kdc_0.2l-7.4_i386.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_i386.deb

Debian heimdal-kdc_0.2l-7.4_m68k.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_m68k.deb

Debian heimdal-kdc_0.2l-7.4_powerpc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_powerpc.deb

Debian heimdal-kdc_0.2l-7.4_sparc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.2 l-7.4_sparc.deb

Debian heimdal-kdc_0.4e-7.woody.4_alpha.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_alpha.deb

Debian heimdal-kdc_0.4e-7.woody.4_arm.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_arm.deb

Debian heimdal-kdc_0.4e-7.woody.4_hppa.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_hppa.deb

Debian heimdal-kdc_0.4e-7.woody.4_i386.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_i386.deb

Debian heimdal-kdc_0.4e-7.woody.4_ia64.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_ia64.deb

Debian heimdal-kdc_0.4e-7.woody.4_m68k.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_m68k.deb

Debian heimdal-kdc_0.4e-7.woody.4_mips.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_mips.deb

Debian heimdal-kdc_0.4e-7.woody.4_mipsel.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_mipsel.deb

Debian heimdal-kdc_0.4e-7.woody.4_powerpc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_powerpc.deb

Debian heimdal-kdc_0.4e-7.woody.4_s390.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_s390.deb

Debian heimdal-kdc_0.4e-7.woody.4_sparc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-kdc_0.4 e-7.woody.4_sparc.deb

Debian heimdal-lib_0.4e-7.woody.4_all.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-lib_0.4 e-7.woody.4_all.deb

Debian heimdal-servers-x_0.2l-7.4_alpha.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_alpha.deb

Debian heimdal-servers-x_0.2l-7.4_arm.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_arm.deb

Debian heimdal-servers-x_0.2l-7.4_i386.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_i386.deb

Debian heimdal-servers-x_0.2l-7.4_m68k.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_m68k.deb

Debian heimdal-servers-x_0.2l-7.4_powerpc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_powerpc.deb

Debian heimdal-servers-x_0.2l-7.4_sparc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.2l-7.4_sparc.deb

Debian heimdal-servers-x_0.4e-7.woody.4_alpha.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_alpha.deb

Debian heimdal-servers-x_0.4e-7.woody.4_arm.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_arm.deb

Debian heimdal-servers-x_0.4e-7.woody.4_hppa.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_hppa.deb

Debian heimdal-servers-x_0.4e-7.woody.4_i386.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_i386.deb

Debian heimdal-servers-x_0.4e-7.woody.4_ia64.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_ia64.deb

Debian heimdal-servers-x_0.4e-7.woody.4_m68k.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_m68k.deb

Debian heimdal-servers-x_0.4e-7.woody.4_mips.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_mips.deb

Debian heimdal-servers-x_0.4e-7.woody.4_mipsel.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_mipsel.deb

Debian heimdal-servers-x_0.4e-7.woody.4_powerpc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_powerpc.deb

Debian heimdal-servers-x_0.4e-7.woody.4_s390.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_s390.deb

Debian heimdal-servers-x_0.4e-7.woody.4_sparc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers -x_0.4e-7.woody.4_sparc.deb

Debian heimdal-servers_0.2l-7.4_alpha.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_alpha.deb

Debian heimdal-servers_0.2l-7.4_arm.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_arm.deb

Debian heimdal-servers_0.2l-7.4_i386.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_i386.deb

Debian heimdal-servers_0.2l-7.4_m68k.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_m68k.deb

Debian heimdal-servers_0.2l-7.4_powerpc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_powerpc.deb

Debian heimdal-servers_0.2l-7.4_sparc.deb
Debian 2.2
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.2l-7.4_sparc.deb

Debian heimdal-servers_0.4e-7.woody.4_alpha.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_alpha.deb

Debian heimdal-servers_0.4e-7.woody.4_arm.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_arm.deb

Debian heimdal-servers_0.4e-7.woody.4_hppa.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_hppa.deb

Debian heimdal-servers_0.4e-7.woody.4_i386.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_i386.deb

Debian heimdal-servers_0.4e-7.woody.4_ia64.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_ia64.deb

Debian heimdal-servers_0.4e-7.woody.4_m68k.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_m68k.deb

Debian heimdal-servers_0.4e-7.woody.4_mips.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_mips.deb

Debian heimdal-servers_0.4e-7.woody.4_mipsel.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_mipsel.deb

Debian heimdal-servers_0.4e-7.woody.4_powerpc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_powerpc.deb

Debian heimdal-servers_0.4e-7.woody.4_s390.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_s390.deb

Debian heimdal-servers_0.4e-7.woody.4_sparc.deb
Debian 3.0
http://security.debian.org/pool/updates/main/h/heimdal/heimdal-servers _0.4e-7.woody.4_sparc.deb

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

SuSE heimdal-0.4e-191.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/sec3/heimdal-0.4e-191.i386 .rpm

SuSE heimdal-0.4e-191.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/heimdal-0.4e-191.src.r pm

SuSE heimdal-devel-0.4e-191.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/d4/heimdal-devel-0.4e-191. i386.rpm

SuSE heimdal-lib-0.4e-191.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/sec1/heimdal-lib-0.4e-191. i386.rpm

KTH Heimdal 0.4 a

KTH heimdal-0.5.tar.gz
ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-0.5.tar.gz

Privacy Statement
Copyright 2008, SecurityFocus