CVE-1999-1099: Kth Kerberos

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.

Affected products

• Kth Kth Kerberos: version 4 only

Published 1996-11-22. Last modified 2026-06-16.