CVE-2004-0644

The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.

Affected Software

Name	Vendor	Start Version	End Version
Kerberos_5	Mit	1.2.2 (including)	1.2.2 (including)
Kerberos_5	Mit	1.2.3 (including)	1.2.3 (including)
Kerberos_5	Mit	1.2.4 (including)	1.2.4 (including)
Kerberos_5	Mit	1.2.5 (including)	1.2.5 (including)
Kerberos_5	Mit	1.2.6 (including)	1.2.6 (including)
Kerberos_5	Mit	1.2.7 (including)	1.2.7 (including)
Kerberos_5	Mit	1.2.8 (including)	1.2.8 (including)
Kerberos_5	Mit	1.3 (including)	1.3 (including)
Kerberos_5	Mit	1.3-alpha1 (including)	1.3-alpha1 (including)
Kerberos_5	Mit	1.3.1 (including)	1.3.1 (including)
Kerberos_5	Mit	1.3.2 (including)	1.3.2 (including)
Kerberos_5	Mit	1.3.3 (including)	1.3.3 (including)
Kerberos_5	Mit	1.3.4 (including)	1.3.4 (including)
Red Hat Enterprise Linux 3	RedHat	krb5-0:1.2.7-28	*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	RedHat		*
Red Hat Enterprise Linux ES version 2.1	RedHat		*
Red Hat Enterprise Linux WS version 2.1	RedHat		*
Red Hat Linux Advanced Workstation 2.1	RedHat		*
Krb5	Ubuntu	dapper	*
Krb5	Ubuntu	devel	*
Krb5	Ubuntu	edgy	*
Krb5	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0644
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References