CVE-2008-0063

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

3.48%

Published

Mar 19, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-908

Affected Products (19)

mit · kerberos_5vulnerable

apple · mac_os_x (up to 10.4.11)vulnerable

apple · mac_os_x (up to 10.5.2)vulnerable

apple · mac_os_x_server (up to 10.4.11)vulnerable

apple · mac_os_x_server (up to 10.5.2)vulnerable

opensuse · opensusevulnerable

suse · linuxvulnerable

suse · linux_enterprise_desktopvulnerable

suse · linux_enterprise_servervulnerable

suse · linux_enterprise_software_development_kitvulnerable

debian · debian_linuxvulnerable

canonical · ubuntu_linuxvulnerable

fedoraproject · fedoravulnerable

References (20)

http://docs.info.apple.com/article.html?artnum=307562

Broken Link

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00006.html

Mailing List

http://secunia.com/advisories/29420

Broken LinkVendor Advisory

http://secunia.com/advisories/29423

Broken LinkVendor Advisory

http://secunia.com/advisories/29424

Broken LinkVendor Advisory

http://secunia.com/advisories/29428

Broken LinkVendor Advisory

http://secunia.com/advisories/29435

Broken LinkVendor Advisory

http://secunia.com/advisories/29438

Broken LinkVendor Advisory

http://secunia.com/advisories/29450

Broken LinkVendor Advisory

http://secunia.com/advisories/29451

Broken LinkVendor Advisory

http://secunia.com/advisories/29457

Broken LinkVendor Advisory

http://secunia.com/advisories/29462

Broken LinkVendor Advisory

http://secunia.com/advisories/29464

Broken LinkVendor Advisory

http://secunia.com/advisories/29516

Broken LinkVendor Advisory

http://secunia.com/advisories/29663

Broken LinkVendor Advisory

http://secunia.com/advisories/30535

Broken LinkVendor Advisory

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022520.html

Broken Link

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5022542.html

Broken Link

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2008-001.txt

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs