CVE-2003-0060

CVE-2003-0060 describes a format-string vulnerability in the MIT Kerberos V5 KDC logging routines prior to version 1.2.5. The issue allows remote attackers to trigger a denial of service (crash) and, potentially, to execute arbitrary code via format string specifiers in Kerberos principal names. ...

MIT Kerberos V5 ASN.1 decoder fails to perform bounds checking on data element length fields

Overview The MIT Kerberos V5 implementation contains an ASN.1 decoding flaw that may allow remote attackers to crash affected Kerberos applications. Description Kerberos V5 protocol messages are defined using Abstract Syntax Notation One ASN.1, a formal language that allows protocol specification...

MIT Kerberos V5 KDC logging routines use unsafe format strings

Overview Early releases of the MIT Kerberos V5 KDC contain format string vulnerabilities that can be used by unauthenticated remote attackers to conduct denial of service attacks on KDC servers. Description Logging routines in some unspecified versions of the MIT Kerberos V5 Key Distribution Cent...

CVE-2000-0859

The CVE-2000-0859 entry describes a DoS in the NTMail web configuration server for NTMail V5 and V6 caused by remote attackers sending a sequence of partial HTTP requests. The impact is denial of service (availability) with no confidentiality or integrity impact stated, and the CVSS vector indica...