critical10.0Public exploit code

CVE-2000-0389

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (3)2000-04-08 · remote · linux · Verified
Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Local Buffer Overflow (2)2000-05-26 · local · linux · Verified
Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (1)2000-05-16 · remote · bsd · Verified

Impact

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Affected products

Vendor	Product	Affected versions
Cygnus	Cygnus Network Security	Version 4.0
Cygnus	Kerbnet	Version 5.0
Mit	Kerberos	Version 4.0
Mit	Kerberos 5	Versions 1.0, 1.1.1
Redhat	Linux	Version 6.2

References