CVE-2003-0058
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers...
CVE-2003-0058 is a medium vulnerability (CVSS 5.0) in Mit Kerberos 5, published February 19, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.83%, the 92nd percentile. Fixed in krb5 1.2.5-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 4.83%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.5-1krb5 +2 more
Description
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
CVE-2003-0058- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
CVE-2003-0058- Updated
- 2026-11-02
EUVDEUVD-2003-0054No score
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
EUVD-2003-0054- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mfh7-xj2q-5w6vNo score
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers...
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
GHSA-mfh7-xj2q-5w6v- Updated
- 2026-11-02
OSVNo score
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
CVE-2003-0058- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0058No score
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
- Record
DEBIAN-CVE-2003-0058- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2003-052.html
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000639
mandrakesoft.com/security/advisories?name=MDKSA-2003:043
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1110
Show 8 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/10099
kb.cert.org/vuls/id/661243
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/50142
securityfocus.com/bid/6683
nvd.nist.gov/vuln/detail/CVE-2003-0058
github.com/advisories/GHSA-mfh7-xj2q-5w6v
security-tracker.debian.org/tracker/CVE-2003-0058