← Back

CVE-2000-0548

nvd nist
Published: Jun 9, 2000Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function.

Affected (8)

Cygnus Network Security Project
1 product
Cygnus Network Security
Kerbnet Project
1 product
Kerbnet
Mit
2 products
Kerberos
Kerberos 5
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Cygnus Network Security
All versions
Kerbnet
All versions
Mit
Kerberos
Before 4.0
Kerberos
Version 4.0
Kerberos
Version 4.0 patch10
Mit
Kerberos 5
From 1.0 to 1.0.7
Kerberos 5
Version 1.1.1
Kerberos 5
Version 1.1

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (12)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.