Lucene search

[email protected]CVE-2000-0546

HistoryJun 09, 2000 - 4:00 a.m.

CVE-2000-0546

2000-06-0904:00:00

CWE-120

[email protected]

web.nvd.nist.gov

cve-2000-0546

kerberos 4

buffer overflow

denial of service

remote attack

lastrealm

set_tgtkey

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.

CPENameOperatorVersion
mit:kerberos_5mit kerberos 5eq1.1
mit:kerberos_5mit kerberos 5eq1.1.1
mit:kerberos_5mit kerberos 5le1.0.7
mit:kerberosmit kerberoseq4.0
cygnus_network_security_project:cygnus_network_securitycygnus network security project cygnus network securityeq-
kerbnet_project:kerbnetkerbnet project kerbneteq-

CPE	Name	Operator	Version
mit:kerberos_5	mit kerberos 5	eq	1.1
mit:kerberos_5	mit kerberos 5	eq	1.1.1
mit:kerberos_5	mit kerberos 5	le	1.0.7
mit:kerberos	mit kerberos	eq	4.0
cygnus_network_security_project:cygnus_network_security	cygnus network security project cygnus network security	eq	-
kerbnet_project:kerbnet	kerbnet project kerbnet	eq	-

References

archives.neohapsis.com/archives/bugtraq/2000-06/0064.html

ciac.llnl.gov/ciac/bulletins/k-051.shtml

web.mit.edu/kerberos/www/advisories/krb4kdc.txt

www.cert.org/advisories/CA-2000-11.html

www.securityfocus.com/bid/1338

Social References

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON