Security readout for executives and security teams
An old flaw in the Kerberos 5 GSSFTP file transfer service (versions 1.1.x) let remote attackers crash the service and let logged-in users escalate to root. It affects legacy MIT Kerberos FTP deployments and was addressed by MIT nearly 25 years ago. Modern environments should not be running this software, but any lingering legacy host is a serious risk. Limited to hosts still running MIT Kerberos 5 1.1.x GSSFTP daemons from around 2000. Any exposed instance is high-impact given remote DoS and local root escalation, but exposure across modern estates should be near zero outside of unpatched legacy Unix systems. Low priority for modern environments, but treat any confirmed legacy MIT Kerberos 1.1.x GSSFTP host as urgent to retire or patch given the remote denial of service and local root escalation impact. Mitigation focus: Upgrade MIT Kerberos 5 to a fixed release per the MIT advisory at web.mit.edu/kerberos.; Retire or disable the GSSFTP daemon on any legacy host where it is not required.; Restrict network access to FTP/GSSFTP ports using host or perimeter firewalls..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2000-0514 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- kerberos-gssftpd-dos(4734)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.