CVE-2003-0139 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0139
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0139

Description: Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2003-051.html http://www.redhat.com/support/errata/RHSA-2003-052.html http://www.redhat.com/support/errata/RHSA-2003-091.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:250 DEBIAN http://www.debian.org/security/2003/dsa-273 http://www.debian.org/security/2003/dsa-266 CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt CERT-VN 442569 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/316960/30/25250/threaded http://www.securityfocus.com/archive/1/archive/1/317130/30/25250/threaded http://marc.theaimsgroup.com/?l=bugtraq&m=104791775804776&w=2

Return to the previous page.