CVE-1999-1296: Mit Kerberos 5

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.

Affected products

• Mit Kerberos 5: version 1.5.2 only

Published 1997-04-29. Last modified 2026-06-16.