CVE-2004-0434

CVE-2004-0434 describes a critical heap-based buffer overflow vulnerability in k5admind (kadmind) for Heimdal, affecting various Debian and Heimdal Project distributions. This flaw allows remote, unauthenticated attackers to execute arbitrary code by sending a specially crafted Kerberos 4 compatibility administration request with a framing length less than 2. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.