CVE-2001-0094

CVE-2001-0094 describes a buffer overflow in the kdc_reply_cipher() of the KTH Kerberos IV library (libkrb) used by NetBSD 1.5 and FreeBSD 4.2 and earlier, enabling a local attacker to gain root privileges or cause a crash by crafting an authentication reply. Exploitation may be facilitated when ...