Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2003-0139
HistoryMar 24, 2003 - 5:00 a.m.

CVE-2003-0139

2003-03-2405:00:00
mitre
web.nvd.nist.gov
37
cve-2003-0139
kerberos
krb5
triple-des
security vulnerability
ticket splicing
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

0.021

Percentile

89.1%

JSON

Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and “ticket splicing.”

Affected configurations

Nvd
Node
mitkerberosMatch4
VendorProductVersionCPE
mitkerberos4cpe:2.3:a:mit:kerberos:4:*:*:*:*:*:*:*

Related

cvelist 1
cert 1
nvd 2
debiancve 1
nessus 5
openvas 3
cve 1
debian 2
osv 1
redhat 1
cvelist
cvelist
CVE-2003-0139
2003-03-21 05:00:00
cert
cert
MIT Kerberos vulnerable to ticket splicing when using Kerberos4 triple DES service tickets
2003-03-20 00:00:00
nvd
nvd
CVE-2003-0139
2003-03-24 05:00:00
CVE-2003-0158
2003-03-24 05:00:00
debiancve
debiancve
CVE-2003-0139
2003-03-24 05:00:00
nessus
nessus
Debian DSA-273-1 : krb4 - Cryptographic weakness
2004-09-29 00:00:00
Debian DSA-266-1 : krb5 - several vulnerabilities
2004-09-29 00:00:00
Mandrake Linux Security Advisory : krb5 (MDKSA-2003:043-1)
2004-07-31 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-273)
2008-01-17 00:00:00
Debian Security Advisory DSA 266-1 (krb5)
2008-01-17 00:00:00
Debian Security Advisory DSA 266-1 (krb5)
2008-01-17 00:00:00
cve
cve
CVE-2003-0158
2003-03-24 05:00:00
debian
debian
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities
2003-03-24 12:06:16
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities
2003-03-24 12:06:16
osv
osv
krb5 - several vulnerabilities
2003-03-24 00:00:00
redhat
redhat
(RHSA-2003:052) krb5 security update
2003-03-27 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

0.021

Percentile

89.1%

JSON
Related for CVE-2003-0139
cvelist1cert1nvd2debiancve1nessus5openvas3cve1debian2osv1redhat1