CVE-2009-0844

CVE-2009-0844 describes a denial-of-service vulnerability in the SPNEGO implementation of MIT Kerberos 5 versions 1.5 through 1.6.3, specifically within the get_input_token function. A remote attacker can exploit this by sending a crafted length value, leading to a buffer over-read that crashes the daemon and potentially exposes sensitive information. With a CVSS score of 5.8 (medium severity), this vulnerability has a network attack vector and medium attack complexity, resulting in partial impact to confidentiality and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.