$ cve CVE-2000-0389 JSON

CVE-2000-0389 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 16.5% (pctl 97)

Patch early

A public exploit exists.

Description

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	16.5% — more likely to be exploited than 97% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2000-05-16
Last modified	2026-06-16

Affected (5)

Vendor	Product
cygnus	cygnus network security
cygnus	kerbnet
mit	kerberos
mit	kerberos 5
redhat	linux

Public exploits

Source	Title	Date
exploit-db	Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Local Buffer Overflow (2)	2000-05-26
exploit-db	Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (1)	2000-05-16
exploit-db	Cygnus Network Security 4.0/KerbNet 5.0 / MIT Kerberos 4/5 / RedHat 6.2 - Compatibility 'krb_rd_req()' Remote Buffer Overflow (3)	2000-04-08

References

→ the Explorer · watch your stack · NVD