CVE-2008-0063
- State
- Published
- Severity
- Not scored
- Published
- Mar 19, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jan 3, 2008
Description
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2008-1744vdb-entry
- 29457third-party-advisory
- MDVSA-2008:069vendor-advisory
- 29464third-party-advisory
- GLSA-200803-31vendor-advisory
- krb5-kdc-kerberos4-info-disclosure(41277)vdb-entry
- FEDORA-2008-2637vendor-advisory
- MDVSA-2008:071vendor-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0112
- 1019627vdb-entry
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html
- 29451third-party-advisory
- 29663third-party-advisory
- FEDORA-2008-2647vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112
- 29438third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0009.html
- ADV-2008-0924vdb-entry
- RHSA-2008:0164vendor-advisory
- MDVSA-2008:070vendor-advisory
- ADV-2008-0922vdb-entry
- 29450third-party-advisory
- 29435third-party-advisory
- 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstationmailing-list
- 29428third-party-advisory
- 29420third-party-advisory
- DSA-1524vendor-advisory
- 30535third-party-advisory
- APPLE-SA-2008-03-18vendor-advisory
- RHSA-2008:0182vendor-advisory
- oval:org.mitre.oval:def:8916vdb-entrysignature
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issuesmailing-list
- RHSA-2008:0180vendor-advisory
- SUSE-SA:2008:016vendor-advisory
- 29516third-party-advisory
- 29462third-party-advisory
- 29424third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- RHSA-2008:0181vendor-advisory
- 29423third-party-advisory
- USN-587-1vendor-advisory
- ADV-2008-1102vdb-entry
- 28303vdb-entry
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt
- 20080318 MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdcmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.