CVE-2005-1689

high-risk
Published 2005-07-18

Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

Do I need to act?

!
55.2% chance of exploitation in next 30 days
EPSS score — higher than 45% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (5)

Affected Vendors

Apple Mit Debian

References (54)

Broken Link ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc
Broken Link http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993
Mailing List http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Mailing List http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Mailing List http://marc.info/?l=bugtraq&m=112119974704542&w=2
Broken Link http://secunia.com/advisories/16041
Broken Link http://secunia.com/advisories/17135
Broken Link http://secunia.com/advisories/17899
Broken Link http://secunia.com/advisories/22090
Broken Link http://securitytracker.com/id?1014461
Broken Link http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1
Patch http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt
Mailing List http://www.debian.org/security/2005/dsa-757
Third Party Advisory http://www.gentoo.org/security/en/glsa/glsa-200507-11.xml
Patch http://www.kb.cert.org/vuls/id/623332
Broken Link http://www.novell.com/linux/security/advisories/2005_17_sr.html
Broken Link http://www.redhat.com/support/errata/RHSA-2005-562.html
Broken Link http://www.redhat.com/support/errata/RHSA-2005-567.html
Broken Link http://www.securityfocus.com/archive/1/446940/100/0/threaded
Broken Link http://www.securityfocus.com/bid/14239
and 34 more references
62
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 18/34 · Moderate
Exposure 12/34 · Low