CVE-2003-0138: mit kerberos

EPSS trend

Probability

4.28%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.28% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

www.debian.org/security/2003/dsa-269Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2003-052.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/archive/1/316960/30/25250/threadedMailing ListX Refsource BUGTRAQ
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txtX Refsource CONFIRMPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A248VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2003-091.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2003/dsa-273Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2003-051.htmlVendor AdvisoryX Refsource REDHAT
www.kb.cert.org/vuls/id/623217Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.debian.org/security/2003/dsa-266Vendor AdvisoryX Refsource DEBIANPatch

Show all 13 references

marc.info?l=bugtraq&m=104791775804776&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/7113VDB EntryX Refsource BID
security-tracker.debian.org/tracker/CVE-2003-0138Advisory

Related vulnerabilities

CVE-2018-20217alpinekrb5+321.42%7y ago26-12-2018 20:00A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.CVE-2018-5709alpinekrb5+32.05%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.CVE-2018-5710alpinekrb5+31.80%8y ago16-01-2018 09:00An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the Key Distribution Center (KDC), which allows remote authenticated users to cause a denial of service (NULL pointer dereference) via a modified kadmin client.CVE-2003-0082debiankrb5+22.69%23y ago26-03-2003 05:00The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").CVE-2003-0139debiankrb5+14.28%23y ago21-03-2003 05:00Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."CVE-2003-0072debiankrb5+21.95%23y ago26-03-2003 05:00The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").

All vulnerabilities inkerberos

CVE-2003-0138: mit kerberos

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References