CVE-2000-0390: Buffer Overflow
Buffer overflow in krb425convprincipal function in Kerberos 5 allows remote attackers to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Kerberos 5from your environment.If Kerberos 5 is not required on the host or network segment, uninstall or disable the Kerberos 5 service to eliminate the vulnerable component.
- Compensating control
Restrict network access to Kerberos 5 services (KDC/related daemons) using firewall rules, ACLs or network segmentation so only trusted hosts/networks can reach them.
- Operational
Treat potential exploitation as a full compromise: investigate logs for signs of exploitation, isolate affected systems, rebuild or reimage compromised hosts from trusted media, and rotate credentials and Kerberos keys/secrets after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0390?
CVE-2000-0390 is classified as a critical vulnerability due to its potential to allow remote attackers to gain root privileges.
How do I fix CVE-2000-0390?
To fix CVE-2000-0390, users should update to the latest version of the affected software as specified by their vendor.
Which software is affected by CVE-2000-0390?
CVE-2000-0390 affects several versions of Kerberos 5, Cygnus Network Security, and Red Hat Linux 6.2.
Can CVE-2000-0390 be exploited remotely?
Yes, CVE-2000-0390 can be exploited remotely by attackers to execute arbitrary code and gain elevated privileges.
Is there a patch available for CVE-2000-0390?
Yes, patches are available from the respective vendors for the software affected by CVE-2000-0390.