CVE-2013-1417
Last modified
CVE-2013-1417 is a vulnerability of currently unknown severity. do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.. EPSS estimates a 1.93% chance of exploitation in the next 30 days.
Description
do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service (daemon crash) via a TGS-REQ request that triggers an attempted cross-realm referral for a host-based service principal.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mit | Kerberos 5 | 1.11 |
| Mit | Kerberos 5 | 1.11.1 |
| Mit | Kerberos 5 | 1.11.2 |
| Mit | Kerberos 5 | 1.11.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-1417?
How severe is CVE-2013-1417?
How do I fix CVE-2013-1417?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-1410Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabil…6.1
- CVE-2013-1412DataLife Engine (DLE) 9.7 allows remote attackers to execute…
- CVE-2013-1413Multiple cross-site scripting (XSS) vulnerabilities in synet…
- CVE-2013-1414Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2013-1415The pkinit_check_kdc_pkid function in plugins/preauth/pkinit…
- CVE-2013-1416The prep_reprocess_req function in do_tgs_req.c in the Key D…
- CVE-2013-1418The setup_server_realm function in main.c in the Key Distrib…
- CVE-2013-1420Multiple cross-site scripting (XSS) vulnerabilities in GetSi…6.1
- CVE-2013-1421Cross-site scripting (XSS) vulnerability in Craig Knudsen We…
- CVE-2013-1422webcalendar before 1.2.7 shows the reason for a failed login…5.3
- CVE-2013-1423(1) contrib/gforge-3.0-cronjobs.patch, (2) cronjobs/homedirs…
- CVE-2013-1424Buffer overflow vulnerability in matplotlib.This issue affec…5.6
Are you affected by CVE-2013-1417?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST