CVE:CVE-2000-0546
CNNVD:CNNVD-200006-043
Kerberos 4 KDC程序存在缓冲区溢出漏洞。远程攻击者借助set_tgtkey函数中lastrealm变量导致拒绝服务。
solution:Upgrade cygnus_network_security_project cygnus_network_security to a higher version than -; Upgrade kerbnet_project kerbnet to a higher version than -; Upgrade mit kerberos to a higher version than 4.0,4.0,4.0:patch10,and avoid the version (,4.0),4.0,4.0:patch10; Upgrade mit kerberos_5 to a higher version than 1.0.7,1.1,1.1.1,and avoid the version [1.0,1.0.7],1.1,1.1.1