[Forgot Password]
Login  Register Subscribe

24003

 
 

131573

 
 

108741

 
 

909

 
 

85467

 
 

134

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2005-1689Date: (C)2005-07-18   (M)2018-02-19


Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 7.5
Exploit Score: Exploit Score: 10.0
Impact Score: Impact Score: 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: LOW
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: PARTIAL
Scope: Integrity: PARTIAL
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  
Reference:
SECTRACK-1014461
SUNALERT-101810
BID-14239
SECUNIA-16041
SECUNIA-17135
SECUNIA-17899
2005-0036
20050703-01-U
http://marc.info/?l=bugtraq&m=112119974704542&w=2
SECUNIA-22090
ADV-2005-1066
ADV-2006-3776
APPLE-SA-2005-08-15
APPLE-SA-2005-08-17
CLA-2005:993
DSA-757
GLSA-200507-11
HPSBUX02152
RHSA-2005:562
RHSA-2005:567
SSRT5973
SUSE-SR:2005:017
TLSA-2005-78
USN-224-1
VU#623332
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt
kerberos-kdc-krb5recvauth-execute-code(21055)

CPE    9
cpe:/a:mit:kerberos:5-1.3.6
cpe:/a:mit:kerberos:5-1.3.5
cpe:/a:mit:kerberos:5-1.3.4
cpe:/a:mit:kerberos:5-1.3.3
...
CWE    1
CWE-119

© SecPod Technologies