CVE-2003-0058

MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers...

5.0 MediumFix available

MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.

Exploit likelihood

4.83%Up 2.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2003-0058
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2003-0058
Updated: 2026-11-02

EUVDEUVD-2003-0054 No score

Record: EUVD-2003-0054
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mfh7-xj2q-5w6v No score

MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers...

Record: GHSA-mfh7-xj2q-5w6v
Updated: 2026-11-02

OSV No score

Record: CVE-2003-0058
Updated: 2026-11-02

OSVDEBIAN-CVE-2003-0058 No score

Record: DEBIAN-CVE-2003-0058
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`krb5` Debian:12	before 1.2.5-1	1.2.5-1
`krb5` Debian:13	before 1.2.5-1	1.2.5-1
`krb5` Debian:14	before 1.2.5-1	1.2.5-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0058 is a medium vulnerability (CVSS 5.0) in Mit Kerberos 5, published February 19, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.83%, the 92nd percentile. Fixed in krb5 1.2.5-1.

References

Show 8 moreShow less