CVE-2000-0546

Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cygnus_network_security_project:cygnus_network_security:-:*:*:*:*:*:*:*
cpe:2.3:a:kerbnet_project:kerbnet:-:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos:4.0:-:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos:4.0:patch10:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*

History

02 Feb 2021, 17:55

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-120
References (BUGTRAQ) http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html - Exploit, Patch, Vendor Advisory (BUGTRAQ) http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html - Broken Link
References (CONFIRM) http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt - (CONFIRM) http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt - Patch, Vendor Advisory
References (BID) http://www.securityfocus.com/bid/1338 - (BID) http://www.securityfocus.com/bid/1338 - Third Party Advisory, VDB Entry
References (CIAC) http://ciac.llnl.gov/ciac/bulletins/k-051.shtml - (CIAC) http://ciac.llnl.gov/ciac/bulletins/k-051.shtml - Broken Link
References (CERT) http://www.cert.org/advisories/CA-2000-11.html - Patch, Third Party Advisory, US Government Resource (CERT) http://www.cert.org/advisories/CA-2000-11.html - Third Party Advisory, US Government Resource
CPE cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*
cpe:2.3:a:cygnus:cygnus_network_security:*:*:*:*:*:*:*:*
cpe:2.3:a:cygnus:kerbnet:*:*:*:*:*:*:*:*
cpe:2.3:a:kerbnet_project:kerbnet:-:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos:4.0:patch10:*:*:*:*:*:*
cpe:2.3:a:cygnus_network_security_project:cygnus_network_security:-:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos:4.0:-:*:*:*:*:*:*

Information

Published : 2000-06-09 04:00

Updated : 2023-12-10 10:17


NVD link : CVE-2000-0546

Mitre link : CVE-2000-0546

CVE.ORG link : CVE-2000-0546


JSON object : View

Products Affected

cygnus_network_security_project

  • cygnus_network_security

mit

  • kerberos
  • kerberos_5

kerbnet_project

  • kerbnet
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')