CVE-2003-0082

2003-04-0205:00:00

mitre

web.nvd.nist.gov

kerberos 5

kdc

denial of service

cve-2003-0082

buffer underrun

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

9.1

Confidence

High

EPSS

0.021

Percentile

89.2%

JSON

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka “buffer underrun”).

Affected configurations

Nvd

Node

mitkerberosMatch1.0

mitkerberosMatch1.2.2.beta1

mitkerberos_5Match1.0.6

mitkerberos_5Match1.1

mitkerberos_5Match1.1.1

mitkerberos_5Match1.2

mitkerberos_5Match1.2.1

mitkerberos_5Match1.2.2

mitkerberos_5Match1.2.3

mitkerberos_5Match1.2.4

mitkerberos_5Match1.2.5

mitkerberos_5Match1.2.6

mitkerberos_5Match1.2.7

mitkerberos_5Match1.3alpha1

VendorProductVersionCPE
mitkerberos1.0cpe:2.3:a:mit:kerberos:1.0:*:*:*:*:*:*:*
mitkerberos1.2.2.beta1cpe:2.3:a:mit:kerberos:1.2.2.beta1:*:*:*:*:*:*:*
mitkerberos_51.0.6cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*
mitkerberos_51.1cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*
mitkerberos_51.1.1cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*
mitkerberos_51.2cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*
mitkerberos_51.2.1cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*
mitkerberos_51.2.2cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*
mitkerberos_51.2.3cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*
mitkerberos_51.2.4cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mit	kerberos	1.0	cpe:2.3:a:mit:kerberos:1.0:::::::*
mit	kerberos	1.2.2.beta1	cpe:2.3:a:mit:kerberos:1.2.2.beta1:::::::*
mit	kerberos_5	1.0.6	cpe:2.3:a:mit:kerberos_5:1.0.6:::::::*
mit	kerberos_5	1.1	cpe:2.3:a:mit:kerberos_5:1.1:::::::*
mit	kerberos_5	1.1.1	cpe:2.3:a:mit:kerberos_5:1.1.1:::::::*
mit	kerberos_5	1.2	cpe:2.3:a:mit:kerberos_5:1.2:::::::*
mit	kerberos_5	1.2.1	cpe:2.3:a:mit:kerberos_5:1.2.1:::::::*
mit	kerberos_5	1.2.2	cpe:2.3:a:mit:kerberos_5:1.2.2:::::::*
mit	kerberos_5	1.2.3	cpe:2.3:a:mit:kerberos_5:1.2.3:::::::*
mit	kerberos_5	1.2.4	cpe:2.3:a:mit:kerberos_5:1.2.4:::::::*