CVE-2000-0550 Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cygnus network security | = 4.0 | No fix listed |
| cygnus kerbnet | = 5.0 | No fix listed |
| mit kerberos | = 4.0 | No fix listed |
| mit kerberos 5 | = 1.0 | No fix listed |
| mit kerberos 5 | = 1.1 | No fix listed |
| mit kerberos 5 | = 1.1.1 | No fix listed |
References
- 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC mailing-list
- K-051 government-resource third-party-advisory
- web.mit.edu
- CA-2000-11 patch third-party-advisory us-government-resource
- RHSA-2000:031 vendor-advisory
- 1465 vdb-entry