CVE

Id
6968  
CVE No.
CVE-2003-0139  
Status
Candidate  
Description
Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."  
Phase
Assigned (20030313)  
Votes
NOOP(1) Christey  
Comments
Christey> MANDRAKE:MDKSA-2003:043 | (as suggested by Vincent Danen of Mandrake)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40425 6968 CVE-2003-0139 BUGTRAQ:20030319 MITKRB5-SA-2003-004: Cryptographic weaknesses in Kerberos v4  View
40426 6968 CVE-2003-0139 URL:http://marc.info/?l=bugtraq&m=104791775804776&w=2  View
40427 6968 CVE-2003-0139 BUGTRAQ:20030330 GLSA: openafs (200303-26)  View
40428 6968 CVE-2003-0139 URL:http://www.securityfocus.com/archive/1/archive/1/317130/30/25250/threaded  View
40429 6968 CVE-2003-0139 BUGTRAQ:20030331 GLSA: krb5 & mit-krb5 (200303-28)  View
40430 6968 CVE-2003-0139 URL:http://www.securityfocus.com/archive/1/archive/1/316960/30/25250/threaded  View
40431 6968 CVE-2003-0139 CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt  View
40432 6968 CVE-2003-0139 DEBIAN:DSA-266  View
40433 6968 CVE-2003-0139 URL:http://www.debian.org/security/2003/dsa-266  View
40434 6968 CVE-2003-0139 DEBIAN:DSA-273  View
40435 6968 CVE-2003-0139 URL:http://www.debian.org/security/2003/dsa-273  View
40436 6968 CVE-2003-0139 REDHAT:RHSA-2003:051  View
40437 6968 CVE-2003-0139 URL:http://www.redhat.com/support/errata/RHSA-2003-051.html  View
40438 6968 CVE-2003-0139 REDHAT:RHSA-2003:052  View
40439 6968 CVE-2003-0139 URL:http://www.redhat.com/support/errata/RHSA-2003-052.html  View
40440 6968 CVE-2003-0139 REDHAT:RHSA-2003:091  View
40441 6968 CVE-2003-0139 URL:http://www.redhat.com/support/errata/RHSA-2003-091.html  View
40442 6968 CVE-2003-0139 CERT-VN:VU#442569  View
40443 6968 CVE-2003-0139 URL:http://www.kb.cert.org/vuls/id/442569  View
40444 6968 CVE-2003-0139 OVAL:oval:org.mitre.oval:def:250  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63384 JVNDB-2003-000110 Mutt および Balsa の不正なフォルダによるバッファオーバーフローの脆弱性 ------------ CVE-2003-0140 6968 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000110.html  View