CVE-2000-0546 — Classic Buffer Overflow in Kerberos

CWE-120 — Classic Buffer Overflow5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
2.6%
top 14.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MIT KerberosMIT Kerberos 5
Timeline
PublishedJun 9
Latest updateApr 30

Description

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDmit/kerberos< 4.0+1
▶NVDmit/kerberos_51.0 — 1.0.7+2

Patches

Patch: web.mit.edu ↗Patch: web.mit.edu ↗

🔴Vulnerability Details

2
GHSA
GHSA-2wm7-6r5c-mjpc: Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function↗2022-04-30
▶
CVEList
CVE-2000-0546: Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function↗2000-07-12
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2000-06-09
▶

💬Community

1
Bugzilla
CVE-2000-0546 security flaw↗2018-08-16
▶
CVE-2000-0546 — Classic Buffer Overflow in MIT Kerberos | cvebase