Skip to content
OpenAdvisories
Unscored DSA-273 2 CVEs

krb4 - Cryptographic weakness

Published Mar 28, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 krb4 1.1-8-2.3

Vulnerabilities 2

  • Unscored —
    CVE-2003-0138

    Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any…

    krb5 heimdal Debian
  • Unscored —
    CVE-2003-0139

    Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when tr…

    krb5 Debian