CVE-2000-0389: cygnus cygnus_network_security

EPSS trend

Probability

16.50%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.50% on 18-09-2026

18-09-202618-10-2026

EPSS score

16.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotebsdVerified
Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (1)
Maturity: weaponized
exploit-databaselocallinuxVerified
Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Local Buffer Overflow (2)
Maturity: weaponized
exploit-databaseremotelinuxVerified
Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (3)
Maturity: weaponized

References

5 links

archives.neohapsis.com/archives/freebsd/2000-05/0295.htmlVendor AdvisoryX Refsource FREEBSD
www.redhat.com/support/errata/RHSA-2000-025.htmlVendor AdvisoryX Refsource REDHAT
www.cert.org/advisories/CA-2000-06.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
archives.neohapsis.com/archives/bugtraq/2000-05/0184.htmlMailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/1220VDB EntryX Refsource BID

Related vulnerabilities

CVE-2018-20217alpinekrb5+321.42%7y ago26-12-2018 20:00A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVE-2018-5709alpinekrb5+32.05%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVE-2018-5710alpinekrb5+31.80%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVE-2003-0138debianheimdal+24.28%23y ago21-03-2003 05:00Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.CVE-2003-0082debiankrb5+22.69%23y ago26-03-2003 05:00The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").CVE-2003-0139debiankrb5+14.28%23y ago21-03-2003 05:00Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."

All vulnerabilities incygnus_network_security kerbnet kerberos kerberos_5 linux

CVE-2000-0389: cygnus cygnus_network_security

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References