CVE-2004-0523: Mit Kerberos

High severity, CVSS 10.0. EPSS: 11.7% chance of exploitation in the next 30 days.

Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

Affected products

• Mit Kerberos: version 1.0 only; version 1.0.8 only; version 1.2.2.beta1 only
• Mit Kerberos 5: version 1.0 only; version 1.0.6 only; version 1.1 only; version 1.1.1 only; version 1.2 only; version 1.2.1 only; …
• Sgi Propack: version 2.4 only; version 3.0 only
• Sun Seam: version 1.0 only; version 1.0.1 only; version 1.0.2 only
• Sun Solaris: version 8.0 only; version 9.0 only
• Sun Sunos: version 5.8 only
• Tinysofa Tinysofa Enterprise Server: version 1.0 only; version 1.0_u1 only

Published 2004-08-18. Last modified 2026-06-16.