CVE

Id
9071  
CVE No.
CVE-2004-0643  
Status
Candidate  
Description
Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.  
Phase
Assigned (20040708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58945 9071 CVE-2004-0643 CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt  View
58946 9071 CVE-2004-0643 CERT:TA04-247A  View
58947 9071 CVE-2004-0643 URL:http://www.us-cert.gov/cas/techalerts/TA04-247A.html  View
58948 9071 CVE-2004-0643 CERT-VN:VU#866472  View
58949 9071 CVE-2004-0643 URL:http://www.kb.cert.org/vuls/id/866472  View
58950 9071 CVE-2004-0643 CONECTIVA:CLA-2004:860  View
58951 9071 CVE-2004-0643 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860  View
58952 9071 CVE-2004-0643 DEBIAN:DSA-543  View
58953 9071 CVE-2004-0643 URL:http://www.debian.org/security/2004/dsa-543  View
58954 9071 CVE-2004-0643 GENTOO:GLSA-200409-09  View
58955 9071 CVE-2004-0643 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml  View
58956 9071 CVE-2004-0643 REDHAT:RHSA-2004:350  View
58957 9071 CVE-2004-0643 URL:http://rhn.redhat.com/errata/RHSA-2004-350.html  View
58958 9071 CVE-2004-0643 TRUSTIX:2004-0045  View
58959 9071 CVE-2004-0643 URL:http://www.trustix.net/errata/2004/0045/  View
58960 9071 CVE-2004-0643 BUGTRAQ:20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos)  View
58961 9071 CVE-2004-0643 URL:http://marc.info/?l=bugtraq&m=109508872524753&w=2  View
58962 9071 CVE-2004-0643 BID:11078  View
58963 9071 CVE-2004-0643 URL:http://www.securityfocus.com/bid/11078  View
58964 9071 CVE-2004-0643 OVAL:oval:org.mitre.oval:def:3322  View
58965 9071 CVE-2004-0643 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3322  View
58966 9071 CVE-2004-0643 OVAL:oval:org.mitre.oval:def:10267  View
58967 9071 CVE-2004-0643 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10267  View
58968 9071 CVE-2004-0643 XF:kerberos-krb5rdcred-double-free(17159)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63007 JVNDB-2004-000349 MIT Kerberos の ASN.1 デコード用ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 MIT krb5 に実装されている ASN.1 デコード用ライブラリには、asn1buf_skiptail() 関数において無限ループが発生する問題が存在し、サービス不能妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2004-0644 9071 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000349.html  View