Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
http://www.securityfocus.com/bid/5729
http://www.iss.net/security_center/static/10116.php
http://www.debian.org/security/2002/dsa-178