Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2008-0063 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2008-0063

CVE-2008-0063

HIGH7.5

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values

Published Mar 19, 2008

Modified 1 years ago

Details

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

References(47)

http://docs.info.apple.com/article.html?artnum=307562

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html

http://secunia.com/advisories/29420

http://secunia.com/advisories/29423

http://secunia.com/advisories/29424

http://secunia.com/advisories/29428

http://secunia.com/advisories/29435

http://secunia.com/advisories/29438

http://secunia.com/advisories/29450

http://secunia.com/advisories/29451

http://secunia.com/advisories/29457

http://secunia.com/advisories/29462

http://secunia.com/advisories/29464

http://secunia.com/advisories/29516

http://secunia.com/advisories/29663

http://secunia.com/advisories/30535

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt

http://wiki.rpath.com/Advisories:rPSA-2008-0112

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

http://www.debian.org/security/2008/dsa-1524

http://www.gentoo.org/security/en/glsa/glsa-200803-31.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2008:069

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Ecosystems

Timeline

PublishedMar 19, 2008

ModifiedAug 7, 2024