CVE-2000-0391: Buffer Overflow
Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Kerberos 5 (krshd)from your environment.Uninstall or remove the krshd daemon from systems where it is not required to eliminate the vulnerable component.
- Configuration
Stop and disable the krshd daemon/service on all affected systems until a vendor-supplied patch or update is applied.
Kerberos 5 (krshd) krshd_enabled = false - Compensating control
Restrict network access to the krshd service using host-based firewalls or network ACLs (block the service port or allow only trusted management IPs) until the vulnerability is remediated.
- Operational
If exploitation is suspected, assume possible root compromise: isolate affected systems, perform full forensic investigation or rebuild from known-good media, and rotate/replace any credentials, keys, or certificates that were used on those systems.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0391?
CVE-2000-0391 is considered a critical vulnerability due to potential remote root privilege escalation.
How do I fix CVE-2000-0391?
To fix CVE-2000-0391, update to the latest patched version of the affected Kerberos software.
What software versions are affected by CVE-2000-0391?
CVE-2000-0391 affects Kerberos 5 versions from Cygnus and MIT, particularly versions 4.0 and 5.0.
Can CVE-2000-0391 be exploited remotely?
Yes, CVE-2000-0391 can be exploited remotely by attackers to gain root privileges.
What are the implications of CVE-2000-0391 for system security?
The implications of CVE-2000-0391 for system security are severe, as it allows unauthorized access and control of affected systems.