CVE-1999-1099: Medium severity KTH KTH Kerberos vulnerability
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
KTH Kerberosfrom your environment.Uninstall KTH Kerberos if Kerberos 4 functionality is not required in your environment.
- Configuration
Disable Kerberos 4 (KRB4) support in the KTH Kerberos configuration to prevent processing of KRB4 UDP packets that can leak realm and last-user information.
KTH Kerberos Kerberos 4 support = disabled - Compensating control
Block or restrict UDP-based Kerberos traffic at network perimeter devices (firewall/ACL) so malformed UDP packets cannot reach the Kerberos daemon; allow access only from trusted hosts.
- Operational
Audit logs for potential disclosure of realm names or user identifiers and rotate credentials for any accounts that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1099?
CVE-1999-1099 is considered a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-1999-1099?
To mitigate CVE-1999-1099, upgrade to a secure version of KTH Kerberos that addresses this vulnerability.
What information can be leaked by CVE-1999-1099?
CVE-1999-1099 can leak the realm name and the last user accessed, risking user privacy.
Which software is affected by CVE-1999-1099?
CVE-1999-1099 affects KTH Kerberos version 4.
Can CVE-1999-1099 be exploited remotely?
Yes, CVE-1999-1099 can be exploited remotely through malformed UDP packets.