[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96125

 
 

909

 
 

78020

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2005-1689

Date: (C)2005-07-18   (M)2017-10-12
 
CVSS Score: 7.5Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

Reference:
SECTRACK-1014461
SUNALERT-101810
BID-14239
SECUNIA-16041
SECUNIA-17135
SECUNIA-17899
2005-0036
20050703-01-U
http://marc.info/?l=bugtraq&m=112119974704542&w=2
SECUNIA-22090
ADV-2005-1066
ADV-2006-3776
APPLE-SA-2005-08-15
APPLE-SA-2005-08-17
CLA-2005:993
DSA-757
GLSA-200507-11
HPSBUX02152
RHSA-2005:562
RHSA-2005:567
SSRT5973
SUSE-SR:2005:017
TLSA-2005-78
USN-224-1
VU#623332
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt
kerberos-kdc-krb5recvauth-execute-code(21055)

CPE    9
cpe:/a:mit:kerberos:5-1.3.5
cpe:/a:mit:kerberos:5-1.3.1
cpe:/a:mit:kerberos:5-1.3.6
cpe:/a:mit:kerberos:5-1.3.4
...
CWE    1
CWE-119

© 2013 SecPod Technologies