Approved changes feed: RSS · Atom

cpe:2.3:a:mit:kerberos:4:*:*:*:*:*:*:*

part: a version: 4 update: *

VendorMit (82b7f5d9-694f-5ac9-86aa-26958677636b)
ProductKerberos (ab07bd70-6c10-5879-bae9-3aee11ead814)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/krb5/krb5 purl2cpe 2026-06-01 10:16:02.400374
pkg:rpm/fedora/krb5 purl2cpe 2026-06-01 10:16:02.400375

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0139 vulnerable 2026-06-08 04:47:20.778287 Details available
Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:36.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0138 vulnerable 2026-06-08 04:47:20.777786 Details available
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:36.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0417 vulnerable 2026-06-08 04:45:20.211007 Details available
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
Published: 2001-05-24T04:00:00.000Z
Updated: 2024-08-08T04:21:37.901Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.