NVD

Id
55  
Name
CVE-2008-0063  
Description
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-03-19  
Modified Date
2011-03-07  
Seq
2008-0063  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
601 55 CVE-2008-0063 http://docs.info.apple.com/article.html?artnum=307562  View
602 55 CVE-2008-0063 APPLE-SA-2008-03-18  View
603 55 CVE-2008-0063 SUSE-SA:2008:016  View
604 55 CVE-2008-0063 oval:org.mitre.oval:def:8916  View
605 55 CVE-2008-0063 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html  View
606 55 CVE-2008-0063 http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html  View
607 55 CVE-2008-0063 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt  View
608 55 CVE-2008-0063 http://wiki.rpath.com/Advisories:rPSA-2008-0112  View
609 55 CVE-2008-0063 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112  View
610 55 CVE-2008-0063 DSA-1524  View
611 55 CVE-2008-0063 GLSA-200803-31  View
612 55 CVE-2008-0063 MDVSA-2008:069  View
613 55 CVE-2008-0063 MDVSA-2008:070  View
614 55 CVE-2008-0063 MDVSA-2008:071  View
615 55 CVE-2008-0063 RHSA-2008:0164  View
616 55 CVE-2008-0063 RHSA-2008:0180  View
617 55 CVE-2008-0063 RHSA-2008:0181  View
618 55 CVE-2008-0063 RHSA-2008:0182  View
619 55 CVE-2008-0063 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc  View
620 55 CVE-2008-0063 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
621 55 CVE-2008-0063 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues  View
622 55 CVE-2008-0063 28303  View
623 55 CVE-2008-0063 1019627  View
624 55 CVE-2008-0063 USN-587-1  View
625 55 CVE-2008-0063 http://www.vmware.com/security/advisories/VMSA-2008-0009.html  View
626 55 CVE-2008-0063 ADV-2008-0922  View
627 55 CVE-2008-0063 ADV-2008-0924  View
628 55 CVE-2008-0063 ADV-2008-1102  View
629 55 CVE-2008-0063 ADV-2008-1744  View
630 55 CVE-2008-0063 krb5-kdc-kerberos4-info-disclosure(41277)  View
631 55 CVE-2008-0063 FEDORA-2008-2637  View
632 55 CVE-2008-0063 FEDORA-2008-2647  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45873 JVNDB-2008-001183 krb5kdc の Kerberos 4 におけるスタックの初期化処理の不備による情報漏えいの脆弱性 MIT Kerberos 5 (krb5kdc) の KDC には、Kerberos 4 サポートにおいて、エラーメッセージを生成する際、バッファの使用していない部分を適切に処理しないため、情報漏えいする脆弱性が存在します。 CVE-2008-0063 30176 CVE-2008-0063 55 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001183.html 2008-03-18 2008-10-29 View