Multiple Cryptographic Weaknesses in Kerberos 4 Protocol

BID:7113

Info

Multiple Cryptographic Weaknesses in Kerberos 4 Protocol

Bugtraq ID: 7113
Class: Design Error
CVE: CVE-2003-0138
Remote: Yes
Local: No
Published: Mar 17 2003 12:00AM
Updated: Jul 11 2009 09:06PM
Credit: Discovery credited to Sam Hartman, Tom Yu, and Ken Raeburn.
Vulnerable: MIT Kerberos 4 Protocol
+ KTH Kerberos 4 1.1.1
+ KTH Kerberos 4 1.0.4
+ KTH Kerberos 4 1.0.3 -1.0
 + KTH Kerberos 4 1.0.3 -1
 + KTH Kerberos 4 1.0.3
+ KTH Kerberos 4 1.0.2
+ KTH Kerberos 4 1.0.1 -1
 + KTH Kerberos 4 1.0.1
+ KTH Kerberos 4 1.0 .x
 + KTH Kerberos 4 1.0 -1.0.1
 + KTH Kerberos 4 1.0
+ KTH Kerberos 4 0.10.1
+ KTH Kerberos 4 0.10
+ KTH Kerberos 4 0.9.9
+ KTH Kerberos 4 0.9.8
+ KTH Kerberos 4 0.9.7
+ KTH Kerberos 4 0.9.6 +patches
 + KTH Kerberos 4 0.9.6
+ KTH Kerberos 4 0.9.5
+ KTH Kerberos 4 0.9.3
+ KTH Kerberos 4 0.9.2 a
 + KTH Kerberos 4 0.9.2
+ KTH Kerberos 4 0.9.1
+ KTH Kerberos 4 0.9
+ KTH Kerberos 4 0.8
+ KTH Kerberos 4 0.7
+ KTH Kerberos 4 0.6
+ KTH Kerberos 4 0.5
+ KTH Kerberos 4 0.1
+ KTH Kerberos 4 0.0
 + MIT Kerberos 4 4.0 patch 10
 + MIT Kerberos 4 4.0
+ MIT Kerberos 4 1.1
+ MIT Kerberos 4 1.0
+ MIT Kerberos 5 1.2.7
+ MIT Kerberos 5 1.2.6
+ MIT Kerberos 5 1.2.5
+ MIT Kerberos 5 1.2.4
+ MIT Kerberos 5 1.2.3
+ MIT Kerberos 5 1.2.2 -beta1
 + MIT Kerberos 5 1.2.2
+ MIT Kerberos 5 1.2.1
+ MIT Kerberos 5 1.2
+ MIT Kerberos 5 1.1.1
+ MIT Kerberos 5 1.1
+ MIT Kerberos 5 1.0.8
+ MIT Kerberos 5 1.0.6
+ MIT Kerberos 5 1.0
+ OpenAFS OpenAFS 1.3.2
+ OpenAFS OpenAFS 1.3.1
+ OpenAFS OpenAFS 1.3
+ OpenAFS OpenAFS 1.2.8
+ OpenAFS OpenAFS 1.2.7
+ OpenAFS OpenAFS 1.2.6
+ OpenAFS OpenAFS 1.2.5
+ OpenAFS OpenAFS 1.2.4
+ OpenAFS OpenAFS 1.2.3
+ OpenAFS OpenAFS 1.2.2 b
 + OpenAFS OpenAFS 1.2.2 a
 + OpenAFS OpenAFS 1.2.2
+ OpenAFS OpenAFS 1.2.1
+ OpenAFS OpenAFS 1.2
+ OpenAFS OpenAFS 1.1.1 a
 + OpenAFS OpenAFS 1.1.1
+ OpenAFS OpenAFS 1.1
+ OpenAFS OpenAFS 1.0.4 a
 + OpenAFS OpenAFS 1.0.4
+ OpenAFS OpenAFS 1.0.3
+ OpenAFS OpenAFS 1.0.2
+ OpenAFS OpenAFS 1.0.1
+ OpenAFS OpenAFS 1.0
Heimdal Heimdal 0.5.1
Heimdal Heimdal 0.5 .0
Heimdal Heimdal 0.4 e
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
Heimdal Heimdal 0.4 d
Heimdal Heimdal 0.4 c
Heimdal Heimdal 0.4 b
Heimdal Heimdal 0.4 a
Heimdal Heimdal 0.3 f
Not Vulnerable: OpenAFS OpenAFS 1.2.9
Heimdal Heimdal 0.6
Heimdal Heimdal 0.5.2

Discussion

Multiple Cryptographic Weaknesses in Kerberos 4 Protocol

Multiple cryptographic weaknesses have recently been reported to affect the Kerberos 4 protocol. These are design faults and affect every full implementation of the protocol. The most serious allows for an adversary to impersonate any principal in a realm. This can result in a complete compromise of the Kerberos Domain Controller and any hosts which rely on it for authentication. Another weakness allow fabrication of Kerberos 4 tickets for unauthorized client principals if triple-DES keys are used to key Kerberos 4 services.

Exploit / POC

Multiple Cryptographic Weaknesses in Kerberos 4 Protocol

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Multiple Cryptographic Weaknesses in Kerberos 4 Protocol

Solution:
Debian has released fixes for Kerberos 4 and Heimdal packages (DSA 273-1, DSA 269-2). Links to the fixes can be found in the Debian advisories in the References section.

NetBSD has released an advisory (2003-006). NetBSD users are advised to upgrade systems via CVS or to disable all kerberos cross-realm functionality until an upgrade is complete. Further details are available in the referenced advisory.

OpenBSD has released patches which address this issue.

A patch for Kerberos 5 with the affected Kerberos 4 code included is available. This patch may be downloaded at http://web.mit.edu/kerberos/www/advisories/2003-004-krb4_patchkit.tar.gz. This patch is not for the Kerberos 4 standalone code.

The OpenAFS Project has released a patch that resolves this issue. Additionally, this problem will be fixed in the forthcoming 1.2.9 release.

Gentoo Linux has released advisory 200303-26, 200305-09, and also advisory 200303-28. Fixes available resolve issues in OpenAFS (200303-26), Heimdal (200305-09) and also Kerberos (200303-28). More information concerning upgrading vulnerable systems is available in the referenced advisories.

Conectiva has released a security advisory (CLA-2003:639) containing fixes which address this issue. Users are advised to upgrade as soon as possible.


MIT Kerberos 4 Protocol

Heimdal Heimdal 0.4 e

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report