Unrated severityNVD Advisory· Published Apr 2, 2003· Updated Jun 16, 2026
CVE-2003-0072
CVE-2003-0072
Description
The Key Distribution Center (KDC) in Kerberos 5 (krb5) 1.2.7 and earlier allows remote, authenticated attackers to cause a denial of service (crash) on KDCs within the same realm using a certain protocol request that causes an out-of-bounds read of an array (aka "array overrun").
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:mit:kerberos_5:1.3:alpha1:*:*:*:*:*:*
- (no CPE)range: <=1.2.7
Patches
Vulnerability mechanics
References
7- web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-005-buf.txtnvdPatchVendor Advisory
- www.debian.org/security/2003/dsa-266nvdPatchVendor Advisory
- sunsolve.sun.com/search/document.donvd
- www.redhat.com/support/errata/RHSA-2003-051.htmlnvd
- www.redhat.com/support/errata/RHSA-2003-052.htmlnvd
- www.securityfocus.com/archive/1/316960/30/25250/threadednvd
- www.securityfocus.com/bid/7184nvd
News mentions
0No linked articles in our index yet.