CVE-2003-0060

CVE-2003-0060 describes format string vulnerabilities in the logging routines of MIT Kerberos V5 Key Distribution Center (KDC) versions prior to 1.2.5. This flaw allows unauthenticated remote attackers to trigger a denial of service by crashing the KDC, and potentially execute arbitrary code, through specially crafted Kerberos principal names containing format string specifiers. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling potential partial confidentiality, integrity, and availability impacts. Despite its age and high community discussion (99th percentile), there is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB.