CVE-2003-0059

Description

Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one realm to impersonate users in other realms that have the same inter-realm keys.

How to fix CVE-2003-0059

To remediate CVE-2003-0059, upgrade the affected package to a fixed version below.

• Debian/krb5—upgrade to 1.2.5-1 or later

Is CVE-2003-0059 being exploited?

Low — EPSS is 3.4%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.2.5-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2003-0059