CVE-2000-0546: Buffer Overflow
Published Jun 9, 2000
·Updated
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the settgtkey function.
Affected Software
8 affected components
Cygnus Network Security Project Cygnus Network Security
Kerbnet Project Kerbnet
MIT Kerberos<4.0
MIT Kerberos=4.0
MIT Kerberos=4.0-patch10
MIT Kerberos 5>=1.0<=1.0.7
MIT Kerberos 5=1.1
MIT Kerberos 5=1.1.1
Remediation
Patch Available
Event History
Jun 9, 2000
CVE Published
04:00 AM
Jul 12, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0546?
CVE-2000-0546 is categorized as a denial of service vulnerability which can be exploited remotely.
2
How do I fix CVE-2000-0546?
To mitigate CVE-2000-0546, it is recommended to upgrade to a non-vulnerable version of the affected Kerberos software.
3
Which versions are affected by CVE-2000-0546?
CVE-2000-0546 affects multiple versions of Kerberos 4, as well as several versions from the MIT Kerberos 5 suite.
4
What type of attack does CVE-2000-0546 facilitate?
CVE-2000-0546 facilitates a remote denial of service attack against the Kerberos KDC program.
5
Is CVE-2000-0546 still a threat today?
CVE-2000-0546 remains a threat for systems still running affected versions of the Kerberos software without remediation.