VDB

GCVE-110-CERTCC-2004-550464

GCVE-110-CERTCC-2004-550464
Advisory Published
Vulnetix · Advisory published August 31, 2004
The asn1buf_skiptail() function in the MIT Kerberos 5 library does not properly terminate a loop, allowing an unauthenticated, remote attacker to cause a denial of service in a Kerberos Distribution Center (KDC), application server, or Kerberos client.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact8population18exploitation0widely_known15score_current16.443ease_of_exploitation14

Aliases

CVE-2004-0644

Transitive aliases

BDU:2015-03374DEBIAN-CVE-2004-0772GHSA-qcm3-q3pj-vw39EUVD-2001-0546BDU:2015-09453RHSA-2001:100RHSA-2002:173GHSA-29c9-5v6h-437jDEBIAN-CVE-2002-0684BDU:2015-08146CVE-2004-0643BDU:2015-08144BDU:2015-03375BDU:2015-03367RHSA-2003:154CERTCC-2002-738331CVE-2003-0059RHSA-2002:242BDU:2015-08133EUVD-2003-0850RHSA-2004:350RHSA-2003:212GHSA-r4jv-xp6w-68qpBDU:2015-08135BDU:2015-03365CISA-2002-0391RHSA-2002:119GSD-2002-1146GSD-2004-0642DSA-272DSA-143BDU:2015-07994cisco-sa-20020903-vpn3k-vulnerabilityDSA-142RHSA-2002:139CVE-2003-0082DSA-282GHSA-2qf2-q2gj-r6v2GSD-2003-0859EUVD-2004-0641CERTCC-2004-350792BDU:2015-08138BDU:2015-07908RHSA-2003:089CVE-2002-0391EUVD-2004-0770ANCHORE-2003-0072BDU:2015-08007DEBIAN-CVE-2004-0644ANCHORE-2003-0082GHSA-mfh7-xj2q-5w6vEUVD-2002-1219DEBIAN-CVE-2003-0058CERTCC-2003-516825BDU:2015-08008BDU:2015-03713GSD-2001-0886BDU:2015-07996EUVD-2003-0068BDU:2015-07909GHSA-w4pr-xjh8-387gRHSA-2002:197CVE-2001-0554CVE-2002-0651BDU:2015-03372GHSA-6w68-qf8p-27phEUVD-2003-0680DEBIAN-CVE-2003-0059CVE-2003-0058CERTCC-2003-442569GSD-2003-0028CVE-2001-0169BDU:2015-08006CVE-2002-0400BDU:2015-07997BDU:2015-03363GHSA-3hqp-jxgp-f6jmGSD-2004-0643CERTCC-2004-795632EUVD-2003-0135GHSA-h6r9-m8w5-h766GHSA-7h7w-5gqf-34vmGHSA-235q-hvh2-g375BDU:2015-03364GHSA-8wgq-vhc2-3cqcRHSA-2004:448GHSA-2288-xjpv-v6jhEUVD-2003-0055BDU:2015-03370CVE-2003-0689RHSA-2003:168EUVD-2002-0036BDU:2015-03368EUVD-2001-0869DEBIAN-CVE-2003-0139DSA-184DSA-543-1RHSA-2003:052BDU:2015-08142CVE-2002-1146DSA-149CVE-2003-0138RHSA-2002:167EUVD-2004-0643GHSA-gh6c-7j72-v6m8CERTCC-2002-587579EUVD-2003-0028CERTCC-2002-542971BDU:2015-08013VAR-200312-0226DEBIAN-CVE-2004-0642DSA-273RHSA-2002:133GSD-2002-0651DEBIAN-CVE-2003-0138GHSA-qxpj-m267-3648GSD-2001-0169DEBIAN-CVE-2002-1146CERTCC-2003-623217DEBIAN-CVE-2003-0072BDU:2015-08001CVE-2003-0028CERTCC-2002-875073EUVD-2002-0678BDU:2015-06289RHSA-2003:090DSA-146GHSA-r94v-226p-r77gBDU:2015-08012DEBIAN-CVE-2003-0689EUVD-2002-0397cisco-sa-20040831-krb5DEBIAN-CVE-2002-1235BDU:2015-08002BDU:2015-08137BDU:2015-03361CVE-2003-0072CVE-2001-0886CERTCC-2001-745371GHSA-844m-mj4w-qff2BDU:2015-08009BDU:2015-03359EUVD-2003-0040BDU:2015-08010EUVD-2003-0078DEBIAN-CVE-2003-0028BDU:2015-02178CVE-2003-0139BDU:2015-08145BDU:2015-08004BDU:2015-03362BDU:2015-06293CVE-2004-0772GHSA-p9j8-4q5m-jqv4EUVD-2003-0054BDU:2015-03373BDU:2015-08141GHSA-4hr3-85ww-cj5wDSA-185RHSA-2002:250CVE-2002-0036RHSA-2003:051CERTCC-2002-803539BDU:2015-08143CVE-2003-0859RHSA-2002:172GHSA-49gw-mv8v-c8mpBDU:2015-08003VAR-200108-0064GHSA-cxg3-hwc8-9mx4EUVD-2002-0645DEBIAN-CVE-2002-0651GHSA-q58h-j692-6gh6BDU:2015-08005BDU:2015-07993BDU:2015-08011CVE-2002-0684RHSA-2003:249BDU:2015-08136DSA-269CVE-2002-1235cisco-sa-20020129-catos-telrcvDEBIAN-CVE-2002-0391BDU:2015-07998BDU:2015-08132GSD-2002-1235BDU:2015-03366BDU:2015-07911EUVD-2001-0169EUVD-2002-1134EUVD-2004-0642CERTCC-2004-866472RHSA-2003:091BDU:2015-08134BDU:2015-02971CERTCC-2002-192995GSD-2004-0644BDU:2015-06282GHSA-5wqg-rq3v-7fw3BDU:2015-03360DSA-333RHSA-2003:022BDU:2015-08139CERTCC-2002-684563BDU:2015-03371ANCHORE-2001-0554BDU:2015-08000GSD-2003-0689DSA-266CERTCC-2002-661243CERTCC-2002-739123CVE-2004-0642EUVD-2003-0134BDU:2015-08147BDU:2015-03369DSA-183RHSA-2003:020CERTCC-2001-386504BDU:2015-07995BDU:2015-07999DEBIAN-CVE-2004-0643GHSA-9vx5-gccr-9gr3DEBIAN-CVE-2003-0082GSD-2001-0554RHSA-2003:325BDU:2015-06285CVE-2003-0041RHSA-2003:021BDU:2015-07910EUVD-2002-0388

References

MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
advisory
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
url
MIT Kerberos 5 ASN.1 decoding function asn1buf_skiptail() does not properly terminate loop
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›