Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from heap corruption to stack corruption depending on the structure of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not used for normal authentication, but only when the Kerberos library does supplemental prompting, such as with PKINIT or when using the non-standard no_prompt PAM configuration option.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
pam-krb5 缓冲区错误漏洞
Vulnerability Description
pam-krb5是一款用于Kerberos身份验证的PAM模块。 pam-krb5 4.9之前版本中存在缓冲区错误漏洞，该漏洞源于不正确的边界检查。远程攻击者可借助特制请求利用该漏洞在受影响的系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A