What’s Vulnerable › Vulnerabilities
CVE-1999-1296
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 1997-04-29 · updated 2026-06-16
Description
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable.
Affected products
- MIT Kerberos 5: 1.5.2
References
Get alerted when CVE-1999-1296 or the next vulnerability affects your stack