CVE-2018-20217

CVE-2018-20217 affects MIT Kerberos 5 (krb5) KDC prior to patch level; a reachable assertion can be triggered in the KDC if an attacker obtains a krbtgt ticket with an old encryption type (DES/RC4) and issues an S4U2Self request, potentially crashing the KDC. Public advisories note the vulnerabil...

CVE-2000-0548

CVE-2000-0548 describes a buffer overflow in the Kerberos 4 KDC program triggered by the e_msg variable in the kerb_err_reply function. This allows remote attackers to cause a Denial of Service over the network. The NVD entry lists network attack vector, low complexity, and no authentication requ...

CVE-2000-0546

The CVE-2000-0546 entry concerns the Kerberos 4 KDC. The vulnerability is a buffer overflow in the KDC’s set_tgtkey function triggered by the lastrealm variable, leading to remote denial of service. Affected component: Kerberos 4 KDC (set_tgtkey). Impact is described as denial of service via netw...

CVE-2000-0547

Technical details (affected software, root cause, patch) are not provided in the supplied documents; monitor for updates.