CVE-2005-1689

CRITICAL

MIT Kerberos 5 < 1.4.1 - Remote Code Execution via Double Free in krb5_recvauth

Title source: llm
STIX 2.1

Description

Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

References (27)

Core 27
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014461
Broken Link, Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446940/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-567.html
Broken Link vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_17_sr.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21055
Broken Link vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1
Broken Link vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-562.html
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3776
Broken Link vendor-advisory x_refsource_turbo
http://www.turbolinux.com/security/2005/TLSA-2005-78.txt
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14239
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16041
Broken Link vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/224-1/
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22090
Mailing List, Patch vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-757
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17135
Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/623332
Mailing List, Patch mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112119974704542&w=2
Broken Link, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17899
Broken Link vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/1066
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Broken Link vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2005/0036

Scores

CVSS v3 9.8
EPSS 0.5520
EPSS Percentile 98.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-415
Status published
Products (5)
apple/mac_os_x < 10.4.2
apple/mac_os_x_server < 10.4.2
debian/debian_linux 3.0
debian/debian_linux 3.1
mit/kerberos_5 < 1.4.1
Published Jul 18, 2005
Tracked Since Feb 18, 2026