CVE-2003-0139

HIGH · CVSS 7.5 EPSS 4.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-03-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2003-0139

Severity

HIGH

CVSS

7.5

EPSS

4.28%

Original NVD Description

Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."