Vulnerability Description
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mit | Kerberos 5 | <= 1.4.1 |
| Apple | Mac Os X | < 10.4.2 |
| Apple | Mac Os X Server | < 10.4.2 |
| Debian | Debian Linux | 3.0 |
Related Weaknesses (CWE)
References
- ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.ascBroken Link
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000993Broken Link
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlMailing List
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlMailing List
- http://marc.info/?l=bugtraq&m=112119974704542&w=2Mailing ListPatch
- http://secunia.com/advisories/16041Broken LinkVendor Advisory
- http://secunia.com/advisories/17135Broken LinkVendor Advisory
- http://secunia.com/advisories/17899Broken LinkVendor Advisory
- http://secunia.com/advisories/22090Broken LinkVendor Advisory
- http://securitytracker.com/id?1014461Broken LinkThird Party AdvisoryVDB Entry
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101810-1Broken Link
- http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txtPatchVendor Advisory
- http://www.debian.org/security/2005/dsa-757Mailing ListPatch
- http://www.gentoo.org/security/en/glsa/glsa-200507-11.xmlThird Party Advisory
- http://www.kb.cert.org/vuls/id/623332PatchThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2005-1689?
CVE-2005-1689 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
How severe is CVE-2005-1689?
CVE-2005-1689 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2005-1689?
Check the references section above for vendor advisories and patch information. Affected products include: Mit Kerberos 5, Apple Mac Os X, Apple Mac Os X Server, Debian Debian Linux.