CVE-2005-1175: Buffer Overflow
Published Jul 17, 2005
·Updated
Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.
Affected Software
9 affected components
MIT Kerberos 5=1.3
MIT Kerberos 5=1.3.1
MIT Kerberos 5=1.3.2
MIT Kerberos 5=1.3.3
MIT Kerberos 5=1.3.4
MIT Kerberos 5=1.3.5
MIT Kerberos 5=1.3.6
MIT Kerberos 5=1.4
MIT Kerberos 5=1.4.1
Remediation
Patch Available
Patch Available
Event History
Jul 17, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1175?
CVE-2005-1175 is classified as a critical severity vulnerability due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2005-1175?
To fix CVE-2005-1175, upgrade MIT Kerberos 5 to version 1.4.2 or later.
3
What types of attacks can CVE-2005-1175 lead to?
CVE-2005-1175 can lead to denial of service or allow attackers to execute arbitrary code on the affected system.
4
Which versions of MIT Kerberos 5 are affected by CVE-2005-1175?
CVE-2005-1175 affects MIT Kerberos 5 versions 1.3 to 1.4.1.
5
Can CVE-2005-1175 be exploited remotely?
Yes, CVE-2005-1175 can be exploited remotely through valid TCP or UDP requests.