CVE-2015-3206

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of…

published August 25, 2017

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02390 · 83.7th percentile
Published
2017-08-25T18:00Z
EPSS history
Timeline
  • 25 AUG 18:00Z
    The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of…
    cvelistv5