CVE-2003-0138
Fixed in a distro release EPSS 4%
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
Products: mit kerberos
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | heimdal | 0.5.2-1 |
| Debian 12 | krb5 | 1.2.7-3 |
| Debian 13 | heimdal | 0.5.2-1 |
| Debian 13 | krb5 | 1.2.7-3 |
| Debian 14 | heimdal | 0.5.2-1 |
| Debian 14 | krb5 | 1.2.7-3 |
| Debian 3.0 | heimdal | 0.4e-7.woody.8 |
| Debian 3.0 | krb4 | 1.1-8-2.3 |
| Debian 3.0 | krb5 | 1.2.4-5woody4 |