MIT Kerberos Key Distribution Center Heap Overflow Vulnerability

Two vulnerabilities have been identified in the Kerberos KDC, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.

1. By sending a specially crafted AS-REQ, an unauthenticated remote attacker can cause the KDC to abnormally terminate or to execute malicious code.
2. By sending a malformed AS-REQ, an unauthenticated remote attacker can cause the KDC to abnormally terminate.