CVE-2002-0036 Integer overflow in n/a
Remote attackers can cause a denial of service in MIT Kerberos V5 by exploiting an integer signedness error in the ASN.1 decoder.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0036?
CVE-2002-0036 is a medium-severity vulnerability in Mit Kerberos 5, published on 1 Sep 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
Which versions are affected by CVE-2002-0036?
It affects 1 product.
Products include Mit Kerberos 5.
How do I fix CVE-2002-0036?
No fix has been published for CVE-2002-0036 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0036 being exploited?
There is no known exploitation of CVE-2002-0036 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as GHSA-4hr3-85ww-cj5w.