CVE-2003-0138 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0138
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0138

Description: Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-091.html http://www.redhat.com/support/errata/RHSA-2003-052.html http://www.redhat.com/support/errata/RHSA-2003-051.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:248 DEBIAN http://www.debian.org/security/2003/dsa-273 http://www.debian.org/security/2003/dsa-269 http://www.debian.org/security/2003/dsa-266 CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt CERT-VN 623217 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/316960/30/25250/threaded http://marc.theaimsgroup.com/?l=bugtraq&m=104791775804776&w=2 BID 7113

Return to the previous page.