Denial of Service Vulnerability in MIT Kerberos V5 ASN.1 Decoder

Denial of Service Vulnerability in MIT Kerberos V5 ASN.1 Decoder

CVE-2002-0036 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.

Learn more about our Cis Benchmark Audit For Mit Kerberos.