CVE

Id
6967  
CVE No.
CVE-2003-0138  
Status
Candidate  
Description
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.  
Phase
Assigned (20030313)  
Votes
NOOP(1) Christey  
Comments
Christey> MANDRAKE:MDKSA-2003:043 | (as suggested by Vincent Danen of Mandrake)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40403 6967 CVE-2003-0138 BUGTRAQ:20030317 MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4 protocol  View
40404 6967 CVE-2003-0138 URL:http://marc.info/?l=bugtraq&m=104791775804776&w=2  View
40405 6967 CVE-2003-0138 BUGTRAQ:20030331 GLSA: krb5 & mit-krb5 (200303-28)  View
40406 6967 CVE-2003-0138 URL:http://www.securityfocus.com/archive/1/archive/1/316960/30/25250/threaded  View
40407 6967 CVE-2003-0138 CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt  View
40408 6967 CVE-2003-0138 DEBIAN:DSA-266  View
40409 6967 CVE-2003-0138 URL:http://www.debian.org/security/2003/dsa-266  View
40410 6967 CVE-2003-0138 DEBIAN:DSA-269  View
40411 6967 CVE-2003-0138 URL:http://www.debian.org/security/2003/dsa-269  View
40412 6967 CVE-2003-0138 DEBIAN:DSA-273  View
40413 6967 CVE-2003-0138 URL:http://www.debian.org/security/2003/dsa-273  View
40414 6967 CVE-2003-0138 REDHAT:RHSA-2003:051  View
40415 6967 CVE-2003-0138 URL:http://www.redhat.com/support/errata/RHSA-2003-051.html  View
40416 6967 CVE-2003-0138 REDHAT:RHSA-2003:052  View
40417 6967 CVE-2003-0138 URL:http://www.redhat.com/support/errata/RHSA-2003-052.html  View
40418 6967 CVE-2003-0138 REDHAT:RHSA-2003:091  View
40419 6967 CVE-2003-0138 URL:http://www.redhat.com/support/errata/RHSA-2003-091.html  View
40420 6967 CVE-2003-0138 CERT-VN:VU#623217  View
40421 6967 CVE-2003-0138 URL:http://www.kb.cert.org/vuls/id/623217  View
40422 6967 CVE-2003-0138 BID:7113  View
40423 6967 CVE-2003-0138 URL:http://www.securityfocus.com/bid/7113  View
40424 6967 CVE-2003-0138 OVAL:oval:org.mitre.oval:def:248  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63358 JVNDB-2003-000084 Kerberos 4 の Triple-DES の実装におけるネットワークトラフィックを解析される脆弱性 ------------ CVE-2003-0139 6967 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000084.html  View