Every CVESearch/Get API key

CVE-2002-1225

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc...

10.0 HighFix available

CVE-2002-1225 is a high vulnerability (CVSS 10.0) in Kth Heimdal, published October 17, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.55%, the 91st percentile. Fixed in heimdal 0.4e-21.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
4.55%EPSS, 91st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.4e-21heimdal +3 more

Description

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Exploit likelihood

4.55%Up 3.3 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
heimdal
Debian:12
before 0.4e-21
0.4e-21
heimdal
Debian:13
before 0.4e-21
0.4e-21
heimdal
Debian:14
before 0.4e-21
0.4e-21
heimdal
Debian:3.0
From an advisory covering 2 CVEs
before 0.4e-7.woody.4, plus listed versions
0.2l-70.2l-7.60.4e-7.woody.1
0.4e-7.woody.4

What each source reports

NVD Score used10.0

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
CVE-2002-1225
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
CVE-2002-1225
Updated
2026-11-02
EUVDEUVD-2002-1209No score

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
EUVD-2002-1209
Updated
2026-11-03
GitHub AdvisoriesGHSA-7gh5-g6w7-v7hqNo score

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc...

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
GHSA-7gh5-g6w7-v7hq
Updated
2026-11-02
OSVNo score

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
CVE-2002-1225
Updated
2026-11-02
OSVDEBIAN-CVE-2002-1225No score

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.

Record
DEBIAN-CVE-2002-1225
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open