| Vulnerability Name: | CVE-2003-0138 (CCN-44277) | ||||||||||||||||||||
| Assigned: | 2003-03-17 | ||||||||||||||||||||
| Published: | 2003-03-17 | ||||||||||||||||||||
| Updated: | 2018-10-19 | ||||||||||||||||||||
| Summary: | Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||||||||||
| Vulnerability Consequences: | Other | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2003-0138 Source: BUGTRAQ Type: UNKNOWN 20030317 MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol Source: CCN Type: RHSA-2003-051 Updated kerberos packages fix various vulnerabilities Source: CCN Type: RHSA-2003-052 krb5 security update Source: CCN Type: RHSA-2003-091 Updated kerberos packages fix various vulnerabilities Source: CCN Type: MIT krb5 Security Advisory 2003-004 Cryptographic weaknesses in Kerberos v4 protocol Source: CONFIRM Type: Patch, Vendor Advisory http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt Source: CCN Type: MIT Kerberos Web site Kerberos 5 Release 1.2 Source: DEBIAN Type: Patch, Vendor Advisory DSA-266 Source: DEBIAN Type: UNKNOWN DSA-269 Source: DEBIAN Type: UNKNOWN DSA-273 Source: DEBIAN Type: DSA-266 krb5 -- several vulnerabilities Source: DEBIAN Type: DSA-269 heimdal -- Cryptographic weakness Source: DEBIAN Type: DSA-273 krb4 -- Cryptographic weakness Source: CCN Type: US-CERT VU#623217 Cryptographic weakness in Kerberos Version 4 protocol Source: CERT-VN Type: Patch, Third Party Advisory, US Government Resource VU#623217 Source: REDHAT Type: UNKNOWN RHSA-2003:051 Source: REDHAT Type: UNKNOWN RHSA-2003:052 Source: REDHAT Type: UNKNOWN RHSA-2003:091 Source: BUGTRAQ Type: UNKNOWN 20030331 GLSA: krb5 & mit-krb5 (200303-28) Source: BID Type: UNKNOWN 7113 Source: CCN Type: BID-7113 Multiple Cryptographic Weaknesses in Kerberos 4 Protocol Source: XF Type: UNKNOWN krb4-principal-spoofing(44277) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:248 | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||