Unscored DSA-1524-1 3 CVEs

krb5 - multiple vulnerabilities

Published Mar 18, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.1	krb5	1.3.6-2sarge6
Debian · 4.0	krb5	1.4.4-7etch5

Vulnerabilities 3

Unscored —

CVE-2008-0062 EPSS 10%

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attacke…

krb5 Debian

Mar 19, 2008
Unscored —

CVE-2008-0063

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when g…

krb5 Debian

Mar 19, 2008
Unscored —

CVE-2008-0947

Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remo…

krb5 Debian

Mar 19, 2008