cbcvebase.
CVE-2004-0371
published 2004-05-04

CVE-2004-0371: Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers…

medium5CVSS 3.1
AVNACLAuNCNIPAN
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianheimdal< heimdal 0.6.1-1 (bookworm)heimdal 0.6.1-1 (bookworm)
heimdal_projectheimdal>= 0 < 0.6.1-10.6.1-1
heimdal_projectheimdal>= 0 < 0.6.1-10.6.1-1
heimdal_projectheimdal>= 0 < 0.6.1-10.6.1-1
heimdal_projectheimdal>= 0 < 0.6.1-10.6.1-1
kthheimdal
kthheimdal
kthheimdal
kthheimdal
kthheimdal
kthheimdal
kthheimdal
kthheimdal
kthheimdal

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv5.0MEDIUM