CVE-2004-0371

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.

Heimdal 0.6.x anteriores a 0.6.1 y 0.5.x anteriores a 0.5.3 no realiza adecuadamente ciertas comprobaciones de consistencia de peticiones entre reinos, lo que permite a atacantes remotos con control de un reino impersonar a otros en la ruta de confianza entre reinos.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-03-24 CVE Reserved
2004-04-06 CVE Published
2024-08-08 CVE Updated
2024-09-15 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://www.pdc.kth.se/heimdal/advisory/2004-04-01	X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/15701	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://www.debian.org/security/2004/dsa-476	2017-07-11

URL	Date	SRC
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc	2017-07-11
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch	2017-07-11
http://security.gentoo.org/glsa/glsa-200404-09.xml	2017-07-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.4a Search vendor "Kth" for product "Heimdal" and version "0.4a"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.4b Search vendor "Kth" for product "Heimdal" and version "0.4b"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.4c Search vendor "Kth" for product "Heimdal" and version "0.4c"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.4d Search vendor "Kth" for product "Heimdal" and version "0.4d"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.4e Search vendor "Kth" for product "Heimdal" and version "0.4e"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.5 Search vendor "Kth" for product "Heimdal" and version "0.5"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.5.1 Search vendor "Kth" for product "Heimdal" and version "0.5.1"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.5.2 Search vendor "Kth" for product "Heimdal" and version "0.5.2"		-		Affected
Kth Search vendor "Kth"		Heimdal Search vendor "Kth" for product "Heimdal"				0.6.0 Search vendor "Kth" for product "Heimdal" and version "0.6.0"		-		Affected