Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request.
http://www.redhat.com/support/errata/RHSA-2000-031.html
http://www.cert.org/advisories/CA-2000-11.html