CVE-2025-3576
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes.
Risk Assessment
The risk involves potential unauthorized tampering of transmitted messages, which could compromise data integrity in network communications.
Recommendation
It is recommended to disable or restrict the use of RC4-HMAC-MD5 encryption in favor of stronger algorithms like AES, and apply the latest security patches for MIT Kerberos.
Original NVD description (English source)
A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.