CVE-2003-0058: Mit Kerberos 5

Medium severity, CVSS 5.0. EPSS: 4.8% chance of exploitation in the next 30 days.

MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.

Affected products

• Mit Kerberos 5: version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.4 only
• Sun Enterprise Authentication Mechanism: version 1.0 only
• Sun Solaris: version 8.0 only; version 9.0 only
• Sun Sunos: version 5.8 only

Published 2003-02-19. Last modified 2026-06-16.