Back to Database
Status published
High
CVE-2003-0059
Unknown vulnerability in the chk_trans.c of the libkrb5 library for...
Vulnerability Description
Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0059
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/support/errata/RHSA-2003-052.html
- http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639
- http://www.redhat.com/support/errata/RHSA-2003-051.html
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043
- http://www.securityfocus.com/bid/6714
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11188
- http://www.kb.cert.org/vuls/id/684563
- http://www.redhat.com/support/errata/RHSA-2003-168.html
More from mit
View All →CVE-2022-42898
PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4...
Unknown
0
CVE-2021-37750
The Key Distribution Center (KDC) in MIT Kerberos 5 (aka...
Medium
6.5
CVE-2021-36222
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in...
High
7.5
CVE-2021-32471
Insufficient input validation in the Marvin Minsky 1967 implementation of...
High
7.8
CVE-2020-28196
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before...
Unknown
0
Affected Vendor
Affected Software
kerberos 5
Vulnerable Versions:
1.2.1, 1.2.2
Timeline
Official Publish:
September 1st, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.