PT-2000-1332 · Mit · Kerberos 5

Published 2000-05-16 · Updated 2020-01-21 · CVE-2000-0390

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kerberos 5 (affected versions not specified)

Description A buffer overflow issue exists in the krb425 conv principal function, allowing remote attackers to potentially gain root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0390

Affected Products

Kerberos 5

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2000-0390 · Security Note
• http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html · Note
• http://securityfocus.com/bid/1220 · Note
• http://redhat.com/support/errata/RHSA-2000-025.html · Note
• http://osvdb.org/4884 · Note
• http://cert.org/advisories/CA-2000-06.html · Note