← Database

CVE-2008-0063

HIGH CVSS: 7.5 Published: 2008-03-19 Modified: 2026-06-16

Description

The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."

Affected Platforms

Canonical Ubuntu LinuxSuse Linux Enterprise Software Development KitFedoraproject FedoraApple Mac Os XDebian Debian LinuxSuse Linux Enterprise DesktopSuse LinuxMit Kerberos 5Opensuse OpensuseApple Mac Os X Server

Weakness Type

CWE-908

References