PT-2004-1848 · Mit · Mit Kerberos 5

Publicado 2004-09-10 · Atualizado 2024-02-02 · CVE-2004-0772

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.2.8 and earlier

Description The issue is related to double free vulnerabilities in error handling code in krb524d, which may allow remote attackers to execute arbitrary code.

Recommendations For MIT Kerberos 5 (krb5) versions 1.2.8 and earlier, update to a version later than 1.2.8 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2004-0772

DSA-543-1

Produtos afetados

Mit Kerberos 5

Referências · 17

• https://security-tracker.debian.org/tracker/CVE-2004-0772 · Aviso do Fabricante
• http://trustix.net/errata/2004/0045 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0772 · Nota de Segurança
• https://t.me/cvenotify/69783 · Publicação no Telegram
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661 · Nota
• http://kb.cert.org/vuls/id/350792 · Nota
• http://debian.org/security/2004/dsa-543 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109508872524753&w=2 · Nota
• http://gentoo.org/security/en/glsa/glsa-200409-09.xml · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 · Aviso do Fabricante
• http://securityfocus.com/bid/11078 · Nota
• https://osv.dev/vulnerability/CVE-2004-0772 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17158 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0772 · Aviso do Fabricante
• http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt · Aviso do Fabricante