Mit: >> Kerberos 5 Security Vulnerabilities
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
CVSS Score
5.0
EPSS Score
0.023
Published
2000-06-09
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
CVSS Score
5.0
EPSS Score
0.024
Published
2000-06-09
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.165
Published
2000-05-16
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.041
Published
2000-05-16
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
CVSS Score
10.0
EPSS Score
0.041
Published
2000-05-16
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
CVSS Score
7.2
EPSS Score
0.004
Published
2000-05-16
The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.
CVSS Score
7.2
EPSS Score
0.003
Published
1999-06-11
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.
CVSS Score
7.2
EPSS Score
0.003
Published
1997-04-29
Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.
CVSS Score
4.6
EPSS Score
0.004
Published
1996-02-21
Page 14