CVE-2000-0550: cygnus cygnus_network_security

EPSS trend

Probability

2.40%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.40% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

www.cert.org/advisories/CA-2000-11.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
ciac.llnl.gov/ciac/bulletins/k-051.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
archives.neohapsis.com/archives/bugtraq/2000-06/0064.htmlMailing ListX Refsource BUGTRAQ
web.mit.edu/kerberos/www/advisories/krb4kdc.txtX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2000-031.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/1465VDB EntryX Refsource BID

Related vulnerabilities

CVE-2018-20217alpinekrb5+321.42%7y ago26-12-2018 20:00A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVE-2018-5709alpinekrb5+32.05%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVE-2018-5710alpinekrb5+31.80%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVE-2003-0138debianheimdal+24.28%23y ago21-03-2003 05:00Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.CVE-2003-0082debiankrb5+22.69%23y ago26-03-2003 05:00The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").CVE-2003-0139debiankrb5+14.28%23y ago21-03-2003 05:00Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."

All vulnerabilities incygnus_network_security kerbnet kerberos kerberos_5

CVE-2000-0550: cygnus cygnus_network_security

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References