CVE-2005-1689: Buffer Overflow
Published Jul 17, 2005
·Updated
Double free vulnerability in the krb5recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
Affected Software
14 affected components
MIT Kerberos 5=1.3
MIT Kerberos 5=1.3.1
MIT Kerberos 5=1.3.2
MIT Kerberos 5=1.3.3
MIT Kerberos 5=1.3.4
MIT Kerberos 5=1.3.5
MIT Kerberos 5=1.3.6
MIT Kerberos 5=1.4
MIT Kerberos 5=1.4.1
MIT Kerberos 5<=1.4.1
Apple iOS and macOS<10.4.2
Apple Mac OS X Server<10.4.2
Debian Debian Linux=3.0
Debian Debian Linux=3.1
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jul 17, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1689?
CVE-2005-1689 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2005-1689?
To fix CVE-2005-1689, upgrade to MIT Kerberos 5 version 1.4.2 or later.
3
Which versions of MIT Kerberos 5 are affected by CVE-2005-1689?
CVE-2005-1689 affects MIT Kerberos 5 versions up to and including 1.4.1.
4
What is the impact of CVE-2005-1689 on system security?
The impact of CVE-2005-1689 includes the possibility of remote code execution, compromising the integrity and confidentiality of the system.
5
Is CVE-2005-1689 specific to certain operating systems?
CVE-2005-1689 affects multiple operating systems using vulnerable versions of MIT Kerberos 5, including Debian and macOS.