CVE-2000-0550

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html
http://ciac.llnl.gov/ciac/bulletins/k-051.shtml
http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
http://www.cert.org/advisories/CA-2000-11.htmlPatch, Third Party Advisory, US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-031.html
http://www.securityfocus.com/bid/1465
http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html
http://ciac.llnl.gov/ciac/bulletins/k-051.shtml
http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt
http://www.cert.org/advisories/CA-2000-11.htmlPatch, Third Party Advisory, US Government Resource
http://www.redhat.com/support/errata/RHSA-2000-031.html
http://www.securityfocus.com/bid/1465

Timeline

Published: Jun 9, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-055110.0The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitra CVE-2000-05525.5ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obt CVE-2000-05532.6Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote a CVE-2000-05545.0Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field.CVE-2000-05555.0Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.CVE-2000-05565.0Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to th CVE-2000-055710.0Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-055810.0Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARM CVE-2000-05592.1eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, whi CVE-2000-05617.5Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.CVE-2000-05627.5BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting CVE-2000-056310.0The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w