CVE-2000-0546 Memory corruption in n/a
Remote attackers can cause a denial of service in Kerberos 4 KDC via a buffer overflow in the set_tgtkey function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2000-0546?
CVE-2000-0546 is a medium-severity memory corruption vulnerability in Mit Kerberos 5, published on 12 Jul 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function.
Weakness: CWE-120
Which versions are affected by CVE-2000-0546?
It affects 4 products.
Products include Cygnus Network Security Project Cygnus Network Security, Kerbnet Project Kerbnet, Mit Kerberos, Mit Kerberos 5.
How do I fix CVE-2000-0546?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2000-0546 being exploited?
There is no known exploitation of CVE-2000-0546 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as GHSA-2wm7-6r5c-mjpc, ROOT-OS-ALPINE-318-CVE-2000-0546.