CVE-2000-0549

Published: Jun 9, 2000Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.

Affected (6)

Products: Cygnus: Cygnus Network Security, Kerbnet · Mit: Kerberos, Kerberos 5

2 products

Cygnus Network Security

2 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cygnus Cygnus Network Security	Version 4.0
Cygnus Kerbnet	Version 5.0
Mit Kerberos	Version 4.0
Mit Kerberos 5	Version 1.0
Mit Kerberos 5	Version 1.1.1
Mit Kerberos 5	Version 1.1

References (10)

http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://ciac.llnl.gov/ciac/bulletins/k-051.shtml

Source: cve@mitre.org

http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt

Source: cve@mitre.org

http://www.cert.org/advisories/CA-2000-11.html

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.redhat.com/support/errata/RHSA-2000-031.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://ciac.llnl.gov/ciac/bulletins/k-051.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cert.org/advisories/CA-2000-11.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.redhat.com/support/errata/RHSA-2000-031.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.