CVEvulnerability

CVE-2004-0772

9.8 CRITICAL Published 2004-10-20 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-10-20
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-415

Description

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.

Affected configurations

• mit kerberos 5 (<= 1.2.8) • openpkg openpkg 2.0 • openpkg openpkg 2.1 • debian debian linux 3.0

Weakness · CWE (1)

CWE-415 Double Free weakness

Referenced by CWE · observed example (2)

CWE-1341 Multiple Releases of Same Resource or Handle weakness
CWE-415 Double Free weakness

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 Broken Link
http://marc.info/?l=bugtraq&m=109508872524753&w=2 Mailing List
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt Patch, Vendor Advisory
http://www.debian.org/security/2004/dsa-543 Mailing List
http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml Third Party Advisory
http://www.kb.cert.org/vuls/id/350792 Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2004:088 Third Party Advisory
http://www.securityfocus.com/bid/11078 Broken Link, Third Party Advisory, VDB Entry
http://www.trustix.net/errata/2004/0045/ Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-247A.html Broken Link, Patch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/17158 Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661 Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860 Broken Link
http://marc.info/?l=bugtraq&m=109508872524753&w=2 Mailing List
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt Patch, Vendor Advisory
http://www.debian.org/security/2004/dsa-543 Mailing List
http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml Third Party Advisory
http://www.kb.cert.org/vuls/id/350792 Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2004:088 Third Party Advisory
http://www.securityfocus.com/bid/11078 Broken Link, Third Party Advisory, VDB Entry
http://www.trustix.net/errata/2004/0045/ Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-247A.html Broken Link, Patch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/17158 Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661 Broken Link