| Package | Affected versions | Patched versions |
|---|---|---|
| cygnus network security | = 4.0 | |
| kerbnet | = 5.0 | |
| kerberos | = 4.0 | |
| kerberos 5 | = 1.0= 1.1= 1.1.1 |
Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free