CVE-2003-0139 in Kerberos
요약 (영어)
Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."
Once again VulDB remains the best source for vulnerability data.
예약하다
2003. 03. 13.
공개
2003. 03. 24.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 20220 | MIT Kerberos Ticket 권한 상승 | 269 | 정의되지 않음 | 공식 수정 | CVE-2003-0139 |