Follow @discotekdotca
CVE-2000-0547
Current Description
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function.
Basic Data
| Published | June 09, 2000 |
|---|---|
| Last Modified | January 21, 2020 |
| Assigner | cve@mitre.org |
| Data Type | CVE |
| Data Format | MITRE |
| Data Version | 4.0 |
| Problem Type | NVD-CWE-Other |
| CVE Data Version | 4.0 |
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| CVSS 2 - Access Vector | NETWORK |
| CVSS 2 - Access Complexity | LOW |
| CVSS 2 - Authentication | NONE |
| CVSS 2 - Confidentiality Impact | NONE |
| CVSS 2 - Availability Impact | PARTIAL |
| CVSS 2 - Base Score | 5.0 |
| Severity | MEDIUM |
| Exploitability Score | 10.0 |
| Impact Score | 2.9 |
| Obtain All Privilege | false |
| Obtain User Privilege | false |
| Obtain Other Privilege | false |
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
Cpe Version Part Vendor Product Version Update Edition Language SW Edition Target SW Target HW Other Version Start Including Version End Including Version Start Excluding Version End Excluding 2.3 Application Cygnus Cygnus Network Security * * * * * * * * 2.3 Application Cygnus Kerbnet * * * * * * * * 2.3 Application Mit Kerberos * * * * * * * * 4.0 2.3 Application Mit Kerberos 5 1.0 * * * * * * * 2.3 Application Mit Kerberos 5 1.1 * * * * * * * 2.3 Application Mit Kerberos 5 1.1.1 * * * * * * *
Vulnerable Software List
| Vendor | Product | Versions |
|---|---|---|
| Mit | Kerberos | * |
| Mit | Kerberos 5 | 1.0, 1.1, 1.1.1 |
| Cygnus | Cygnus Network Security | * |
| Cygnus | Kerbnet | * |
References
| Name | Source | URL | Tags |
|---|---|---|---|
| 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC | http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html | BUGTRAQ | Exploit Patch Vendor Advisory |
| K-051 | http://ciac.llnl.gov/ciac/bulletins/k-051.shtml | CIAC | |
| http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt | http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt | CONFIRM | |
| CA-2000-11 | http://www.cert.org/advisories/CA-2000-11.html | CERT | Patch Third Party Advisory US Government Resource |
| 1338 | http://www.securityfocus.com/bid/1338 | BID |