CVE-2003-0138
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
La versión 4 del protocolo Kerberos (kbr4) permite a un atacante impersonar a cualquier principal en un dominio (realm) mediante un ataque de texto plano elegido.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2003-03-13 CVE Reserved
- 2003-03-21 CVE Published
- 2024-07-29 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (14)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=104791775804776&w=2 | Mailing List | |
| http://www.securityfocus.com/archive/1/316960/30/25250/threaded | Mailing List | |
| http://www.securityfocus.com/bid/7113 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A248 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt | 2018-10-19 | |
| http://www.debian.org/security/2003/dsa-266 | 2018-10-19 | |
| http://www.kb.cert.org/vuls/id/623217 | 2018-10-19 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2003/dsa-269 | 2018-10-19 | |
| http://www.debian.org/security/2003/dsa-273 | 2018-10-19 | |
| http://www.redhat.com/support/errata/RHSA-2003-051.html | 2018-10-19 | |
| http://www.redhat.com/support/errata/RHSA-2003-052.html | 2018-10-19 | |
| http://www.redhat.com/support/errata/RHSA-2003-091.html | 2018-10-19 | |
| https://access.redhat.com/security/cve/CVE-2003-0138 | 2003-04-29 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1616981 | 2003-04-29 |