CVE-2004-0371

2004-05-0404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0371

heimdal

security

cross-realm

impersonation

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.6%

JSON

Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.

CPENameOperatorVersion
kth:heimdalkth heimdaleq0.5.2
kth:heimdalkth heimdaleq0.4d
kth:heimdalkth heimdaleq0.4a
kth:heimdalkth heimdaleq0.5
kth:heimdalkth heimdaleq0.6.0
kth:heimdalkth heimdaleq0.4b
kth:heimdalkth heimdaleq0.4e
kth:heimdalkth heimdaleq0.5.1
kth:heimdalkth heimdaleq0.4c

CPE	Name	Operator	Version
kth:heimdal	kth heimdal	eq	0.5.2
kth:heimdal	kth heimdal	eq	0.4d
kth:heimdal	kth heimdal	eq	0.4a
kth:heimdal	kth heimdal	eq	0.5
kth:heimdal	kth heimdal	eq	0.6.0
kth:heimdal	kth heimdal	eq	0.4b
kth:heimdal	kth heimdal	eq	0.4e
kth:heimdal	kth heimdal	eq	0.5.1
kth:heimdal	kth heimdal	eq	0.4c