CVE-2008-0947
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 8.8%
exploitation probability
8.8%top 5% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execute arbitrary code by triggering a large number of open file descriptors.
Affected products
n/a · n/aReferences
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.htmlhttp://marc.info/?l=bugtraq&m=130497213107107&w=2http://secunia.com/advisories/29424http://secunia.com/advisories/29428http://secunia.com/advisories/29435http://secunia.com/advisories/29438http://secunia.com/advisories/29451http://secunia.com/advisories/29457http://secunia.com/advisories/29462http://secunia.com/advisories/29464http://secunia.com/advisories/29516http://secunia.com/advisories/29663