CVE-1999-0143 Auth bypass in n/a

What is CVE-1999-0143?

CVE-1999-0143 is a medium-severity authentication bypass vulnerability in Mit Kerberos 5, published on 29 Sep 1999. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys.

Which versions are affected by CVE-1999-0143?

It affects 4 products.

Products include Mit Kerberos, Mit Kerberos 5, Process Software Multinet, Sun Sunos.

How do I fix CVE-1999-0143?

No fix has been published for CVE-1999-0143 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-1999-0143 being exploited?

There is no known exploitation of CVE-1999-0143 in the wild and no public exploit code.

Other vulnerabilities in Mit Kerberos 5

• CVE-2009-4212 Integer overflow in n/a Critical 10.0
• CVE-2004-0523 Memory corruption in n/a Critical 10.0
• CVE-2010-0283 Denial of service in n/a High 7.8
• CVE-2018-5709 Integer overflow in n/a High 7.5
• CVE-2003-0138 Auth bypass in n/a High 7.5

All Mit Kerberos 5 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vhvw-7mgj-5p4w.