Skip to content
OpenAdvisories
Unscored DSA-266 5 CVEs

krb5 - several vulnerabilities

Published Mar 24, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 krb5 1.2.4-5woody4

Vulnerabilities 5

  • Unscored —
    CVE-2003-0028 EPSS 15%

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation)…

  • Unscored —

    The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to caus…

  • Unscored —

    The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to caus…

  • Unscored —

    Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any…

  • Unscored —

    Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when tr…