CVE-2000-0548: Buffer Overflow
Published Jun 9, 2000
·Updated
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the emsg variable in the kerberrreply function.
Affected Software
8 affected components
MIT Kerberos 5=1.1
MIT Kerberos 5=1.1.1
MIT Kerberos 5>=1.0<=1.0.7
MIT Kerberos=4.0-patch10
MIT Kerberos=4.0
Cygnus Network Security Project Cygnus Network Security
Kerbnet Project Kerbnet
MIT Kerberos<4.0
Remediation
Patch Available
Event History
Jun 9, 2000
CVE Published
04:00 AM
Oct 13, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0548?
CVE-2000-0548 is a high severity vulnerability due to the potential for remote denial of service attacks.
2
How do I fix CVE-2000-0548?
To fix CVE-2000-0548, update to a patched version of the MIT Kerberos software that addresses the buffer overflow issue.
3
What software is affected by CVE-2000-0548?
CVE-2000-0548 affects various versions of MIT Kerberos 4 and 5, specifically those below version 1.1.2.
4
Can CVE-2000-0548 be exploited remotely?
Yes, CVE-2000-0548 can be exploited remotely by attackers targeting the Kerberos 4 KDC program.
5
What are the consequences of exploiting CVE-2000-0548?
Exploiting CVE-2000-0548 can lead to a denial of service, disrupting authentication services across a network.