CVE-2000-0549 Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cygnus network security | = 4.0 | No fix listed |
| cygnus kerbnet | = 5.0 | No fix listed |
| mit kerberos | = 4.0 | No fix listed |
| mit kerberos 5 | = 1.0 | No fix listed |
| mit kerberos 5 | = 1.1 | No fix listed |
| mit kerberos 5 | = 1.1.1 | No fix listed |
References
- 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC exploit mailing-list patch vendor-advisory
- K-051 government-resource third-party-advisory
- web.mit.edu
- CA-2000-11 patch third-party-advisory us-government-resource
- RHSA-2000:031 vendor-advisory