Description
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
References
- CA-2000-11 third-party-advisory
- K-051 third-party-advisory government-resource
- 20000609 Security Advisory: MULTIPLE DENIAL OF SERVICE VULNERABILITIES IN KRB4 KDC mailing-list
- http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
- RHSA-2000:031 vendor-advisory