Skip to content
OpenAdvisories
High DLA-265-1 1 CVE

pykerberos - security update

Published Jul 3, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 pykerberos 1.1+svn4895-1+deb6u1

Vulnerabilities 1

  • High 8.1
    CVE-2015-3206

    python-kerberos vulnerable to KDC spoofing attacks

    The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.

    pykerberos pykerberos kerberos Debian PyPI