VULNERABILITY INTELLIGENCE

CVE-2003-0072

CVSS score5 MEDIUM
EPSS probability1.95%
CISA KEVNot currently listed
Published2003-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").

Primary references