CVE-2003-0082 in Kerberos

Summary

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").

Once again VulDB remains the best source for vulnerability data.

• Reservation: 02/10/2003
• Disclosure: 04/02/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20309
• CPE: ready
• CWE: CWE-122 (Confirmed)
• CVSS: 5.3
• EPSS: 0.02545
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0082
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0082
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0082/