Description
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.
References
- 19961122 L0pht Kerberos Advisory mailing-list
- kerberos-user-grab(65) vdb-entry