CVE-2003-0139

Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4…

published March 21, 2003

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04284 · 91.0th percentile
Published
2003-03-21T05:00Z
EPSS history
Timeline
  • 21 MAR 05:00Z
    Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4…
    cvelistv5