CVE:CVE-2002-2443
CNNVD:CNNVD-201305-297
Kerberos是美国麻省理工学院（MIT）开发的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。
MIT Kerberos 5 (又名krb5) 1.11.3之前的版本中的kadmind中的kpasswd服务中的schpw.c中存在漏洞，该漏洞源于发送响应之前程序没有正确验证UDP数据包。远程攻击者可通过能够触发通信循环的伪造数据包（如krb_pingpong.nasl）利用该漏洞造成拒绝服务（CUP和带宽消耗）。
solution:Upgrade mit kerberos_5 to a higher version than 1.11.3,and avoid the version (,1.11.3); Upgrade opensuse opensuse to a higher version than 11.4,12.2,12.3,and avoid the version 11.4,12.2,12.3; Upgrade fedoraproject fedora to a higher version than 17,18,19,and avoid the version 17,18,19; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.9,6.4,and avoid the version 5.9,6.4; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,and avoid the version 6.4; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade debian debian_linux to a higher version than 6.0,7.0,8.0,and avoid the version 6.0,7.0,8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10