CVE-2000-0549: Cygnus Network Security

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.

Affected products

• Cygnus Cygnus Network Security: version 4.0 only
• Cygnus Kerbnet: version 5.0 only
• Mit Kerberos: version 4.0 only
• Mit Kerberos 5: version 1.0 only; version 1.1 only; version 1.1.1 only

Published 2000-06-09. Last modified 2026-06-16.