Lucene search

MitreCVE-2003-0072

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2003-0072

2003-04-0205:00:00

mitre

web.nvd.nist.gov

kdc

key distribution center

kerberos 5

krb5

denial of service

array overrun

cve-2003-0072

nvd

security vulnerability

out-of-bounds read

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.9

Confidence

High

EPSS

0.014

Percentile

86.5%

JSON

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka “array overrun”).

Affected configurations

Nvd

Node

mitkerberosMatch1.0

mitkerberosMatch1.2.2.beta1

mitkerberos_5Match1.0.6

mitkerberos_5Match1.1

mitkerberos_5Match1.1.1

mitkerberos_5Match1.2

mitkerberos_5Match1.2.1

mitkerberos_5Match1.2.2

mitkerberos_5Match1.2.3

mitkerberos_5Match1.2.4

mitkerberos_5Match1.2.5

mitkerberos_5Match1.2.6

mitkerberos_5Match1.2.7

mitkerberos_5Match1.3alpha1

VendorProductVersionCPE
mitkerberos1.0cpe:2.3:a:mit:kerberos:1.0:*:*:*:*:*:*:*
mitkerberos1.2.2.beta1cpe:2.3:a:mit:kerberos:1.2.2.beta1:*:*:*:*:*:*:*
mitkerberos_51.0.6cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*
mitkerberos_51.1cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*
mitkerberos_51.1.1cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*
mitkerberos_51.2cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*
mitkerberos_51.2.1cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*
mitkerberos_51.2.2cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*
mitkerberos_51.2.3cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*
mitkerberos_51.2.4cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mit	kerberos	1.0	cpe:2.3:a:mit:kerberos:1.0:::::::*
mit	kerberos	1.2.2.beta1	cpe:2.3:a:mit:kerberos:1.2.2.beta1:::::::*
mit	kerberos_5	1.0.6	cpe:2.3:a:mit:kerberos_5:1.0.6:::::::*
mit	kerberos_5	1.1	cpe:2.3:a:mit:kerberos_5:1.1:::::::*
mit	kerberos_5	1.1.1	cpe:2.3:a:mit:kerberos_5:1.1.1:::::::*
mit	kerberos_5	1.2	cpe:2.3:a:mit:kerberos_5:1.2:::::::*
mit	kerberos_5	1.2.1	cpe:2.3:a:mit:kerberos_5:1.2.1:::::::*
mit	kerberos_5	1.2.2	cpe:2.3:a:mit:kerberos_5:1.2.2:::::::*
mit	kerberos_5	1.2.3	cpe:2.3:a:mit:kerberos_5:1.2.3:::::::*
mit	kerberos_5	1.2.4	cpe:2.3:a:mit:kerberos_5:1.2.4:::::::*