9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.118 Low
EPSS
Percentile
94.5%
Emmanuel Bouillon from NCI Agency discovered multiple vulnerabilities in MIT
Kerberos, a daemon implementing the network authentication protocol.
This CVE only affects testing (wheezy) and unstable (sid) distributions.
In both cases, arbitrary code execution is believed to be difficult to achieve,
but might not be impossible.
For the stable distribution (squeeze), this problem has been fixed in
version 1.8.3+dfsg-4squeeze6.
For the testing distribution (wheezy), this problem has been fixed in
version 1.10.1+dfsg-2.
For the unstable distribution (sid), this problem has been fixed in
version 1.10.1+dfsg-2.
We recommend that you upgrade your krb5 packages.
CPE | Name | Operator | Version |
---|---|---|---|
krb5 | eq | 1.8.3+dfsg-4 | |
krb5 | eq | 1.8.3+dfsg-4squeeze1 | |
krb5 | eq | 1.8.3+dfsg-4squeeze2 | |
krb5 | eq | 1.8.3+dfsg-4squeeze5 |