CVE

Id
9070  
CVE No.
CVE-2004-0642  
Status
Candidate  
Description
Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.  
Phase
Assigned (20040708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58921 9070 CVE-2004-0642 CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt  View
58922 9070 CVE-2004-0642 CERT:TA04-247A  View
58923 9070 CVE-2004-0642 URL:http://www.us-cert.gov/cas/techalerts/TA04-247A.html  View
58924 9070 CVE-2004-0642 CERT-VN:VU#795632  View
58925 9070 CVE-2004-0642 URL:http://www.kb.cert.org/vuls/id/795632  View
58926 9070 CVE-2004-0642 CONECTIVA:CLA-2004:860  View
58927 9070 CVE-2004-0642 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860  View
58928 9070 CVE-2004-0642 DEBIAN:DSA-543  View
58929 9070 CVE-2004-0642 URL:http://www.debian.org/security/2004/dsa-543  View
58930 9070 CVE-2004-0642 GENTOO:GLSA-200409-09  View
58931 9070 CVE-2004-0642 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml  View
58932 9070 CVE-2004-0642 REDHAT:RHSA-2004:350  View
58933 9070 CVE-2004-0642 URL:http://rhn.redhat.com/errata/RHSA-2004-350.html  View
58934 9070 CVE-2004-0642 TRUSTIX:2004-0045  View
58935 9070 CVE-2004-0642 URL:http://www.trustix.net/errata/2004/0045/  View
58936 9070 CVE-2004-0642 BUGTRAQ:20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)  View
58937 9070 CVE-2004-0642 URL:http://marc.info/?l=bugtraq&m=109508872524753&w=2  View
58938 9070 CVE-2004-0642 BID:11078  View
58939 9070 CVE-2004-0642 URL:http://www.securityfocus.com/bid/11078  View
58940 9070 CVE-2004-0642 OVAL:oval:org.mitre.oval:def:4936  View
58941 9070 CVE-2004-0642 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4936  View
58942 9070 CVE-2004-0642 OVAL:oval:org.mitre.oval:def:10709  View
58943 9070 CVE-2004-0642 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10709  View
58944 9070 CVE-2004-0642 XF:kerberos-kdc-double-free(17157)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63006 JVNDB-2004-000348 MIT Kerberos の krb5_rd_cred() 関数におけるメモリ二重開放の脆弱性 MIT krb5 には、リモートログインデーモン (krshd, klogind, and telnetd) や FTP デーモンによって呼び出される krb5_rd_cred() 関数において、ASN.1 構造体のデコード処理部の不備のためにメモリ二重開放の脆弱性が存在します。 CVE-2004-0643 9070 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000348.html  View