CVE-2002-1225

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-10-28 · updated 2026-06-16

Description

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Affected products

Kth Heimdal: 0.3e, 0.4a, 0.4b, 0.4c, 0.4d, 0.4e

References

http://marc.info/?l=bugtraq&m=103341355708817&w=2
http://marc.info/?l=bugtraq&m=103462479621246&w=2
http://www.debian.org/security/2002/dsa-178
http://www.iss.net/security_center/static/10116.php
http://www.securityfocus.com/bid/5729
http://marc.info/?l=bugtraq&m=103341355708817&w=2
http://marc.info/?l=bugtraq&m=103462479621246&w=2
http://www.debian.org/security/2002/dsa-178
http://www.iss.net/security_center/static/10116.php
http://www.securityfocus.com/bid/5729

Get alerted when CVE-2002-1225 or the next vulnerability affects your stack