CVE-2003-0072

2003-04-0205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

kdc

key distribution center

kerberos 5

krb5

denial of service

array overrun

cve-2003-0072

nvd

security vulnerability

out-of-bounds read

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.3%

JSON

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka “array overrun”).

CPENameOperatorVersion
mit:kerberosmit kerberoseq1.2.2.beta1
mit:kerberosmit kerberoseq1.0
mit:kerberos_5mit kerberos 5eq1.1
mit:kerberos_5mit kerberos 5eq1.2
mit:kerberos_5mit kerberos 5eq1.2.1
mit:kerberos_5mit kerberos 5eq1.2.2
mit:kerberos_5mit kerberos 5eq1.2.3
mit:kerberos_5mit kerberos 5eq1.2.4
mit:kerberos_5mit kerberos 5eq1.2.5
mit:kerberos_5mit kerberos 5eq1.2.6

CPE	Name	Operator	Version
mit:kerberos	mit kerberos	eq	1.2.2.beta1
mit:kerberos	mit kerberos	eq	1.0
mit:kerberos_5	mit kerberos 5	eq	1.1
mit:kerberos_5	mit kerberos 5	eq	1.2
mit:kerberos_5	mit kerberos 5	eq	1.2.1
mit:kerberos_5	mit kerberos 5	eq	1.2.2
mit:kerberos_5	mit kerberos 5	eq	1.2.3
mit:kerberos_5	mit kerberos 5	eq	1.2.4
mit:kerberos_5	mit kerberos 5	eq	1.2.5
mit:kerberos_5	mit kerberos 5	eq	1.2.6