CVE-2005-1174 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-1174
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-1174

Description: MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/21327 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-224-1 TURBO http://www.turbolinux.com/security/2005/TLSA-2005-78.txt TRUSTIX http://www.trustix.org/errata/2005/0036 SUSE http://www.novell.com/linux/security/advisories/2005_17_sr.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1 ST 1014460 SGI SAID Secunia Advisory: SA16041 Secunia Advisory: SA17899 Secunia Advisory: SA20364 REDHAT http://www.redhat.com/support/errata/RHSA-2005-567.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:397 DEBIAN http://www.debian.org/security/2005/dsa-757 CONFIRM http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt CERT-VN 259798 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=112122123211974&w=2 BID 14240 APPLE http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474

Return to the previous page.