CVE-1999-1099

Medium

Published: 22/11/1996(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.32%

67th percentile - higher than 67% of all known CVEs

Summary

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.

Risk Assessment

Attackers may exploit this vulnerability to disclose confidential data, potentially leading to further attacks on systems using Kerberos.

Recommendation

It is recommended to update to the latest version of Kerberos and monitor network traffic for suspicious UDP packets.

Original NVD description (English source)

Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user.