CVE-2008-0947: mit kerberos_5

EPSS trend

Probability

8.83%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.83% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

38 links

securityreason.com/securityalert/3752Third Party AdvisoryX Refsource SREASON
www.us-cert.gov/cas/techalerts/TA08-079B.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/29457Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:069Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/archive/1/489784/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/29464Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/28302VDB EntryX Refsource BID
www.redhat.com/archives/fedora-package-announce/2008-March/msg00537.htmlVendor AdvisoryX Refsource FEDORA
wiki.rpath.com/Advisories:rPSA-2008-0112X Refsource CONFIRM
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.htmlX Refsource CONFIRM

Show all 38 references

marc.info?l=bugtraq&m=130497213107107&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/29451Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29663Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-March/msg00544.htmlVendor AdvisoryX Refsource FEDORA
wiki.rpath.com/wiki/Advisories:rPSA-2008-0112X Refsource CONFIRM
secunia.com/advisories/29438Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0164.htmlVendor AdvisoryX Refsource REDHAT
www.mandriva.com/security/advisories?name=MDVSA-2008:070Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2008/0922/referencesVDB EntryX Refsource VUPEN
secunia.com/advisories/29435Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10984VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/archive/1/489883/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/29428Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1524Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/archive/1/489762/100/0/threadedMailing ListX Refsource BUGTRAQ
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.htmlX Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29516Third Party AdvisoryX Refsource SECUNIA
web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-002.txtX Refsource CONFIRM
secunia.com/advisories/29462Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29424Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1019631VDB EntryX Refsource SECTRACK
www.ubuntu.com/usn/usn-587-1Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2008/1102/referencesVDB EntryX Refsource VUPEN
security.gentoo.org/glsa/glsa-200803-31.xmlVendor AdvisoryX Refsource GENTOO
www.kb.cert.org/vuls/id/374121Third Party AdvisoryX Refsource CERT VNUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/41273VDB EntryX Refsource XF
security-tracker.debian.org/tracker/CVE-2008-0947Advisory

Related vulnerabilities

CVE-2018-5730debiankrb5+72.24%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.CVE-2018-5729debiankrb5+72.58%8y ago06-03-2018 20:00MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container check by supplying tagged data that is internal to the database module.CVE-2003-0060debiankrb5+15.56%23y ago01-02-2003 05:00Format string vulnerabilities in the logging routines for MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in Kerberos principal names.CVE-2003-0059debiankrb5+13.55%22y ago01-09-2004 04:00Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.CVE-2003-0028crayunicos+1515.03%23y ago21-03-2003 05:00Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.CVE-2003-0082debiankrb5+22.69%23y ago26-03-2003 05:00The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes the KDC to corrupt its heap (aka "buffer underrun").

All vulnerabilities inkerberos_5

CVE-2008-0947: mit kerberos_5

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References