Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2005-1175 Details

Description

Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc	CVE
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html	CVE
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html	CVE
http://marc.info/?l=bugtraq&m=112122123211974&w=2	CVE
http://secunia.com/advisories/16041	CVE
http://secunia.com/advisories/17135	CVE
http://secunia.com/advisories/17899	CVE
http://secunia.com/advisories/20364	CVE
http://securitytracker.com/id?1014460	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/21328	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A736	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9902	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1	CVE
https://usn.ubuntu.com/224-1/	CVE
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt	CVE	PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474	CVE
http://www.debian.org/security/2005/dsa-757	CVE	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/885830	CVE	PatchThird Party AdvisoryUS Government Resource
http://www.novell.com/linux/security/advisories/2005_17_sr.html	CVE
http://www.redhat.com/support/errata/RHSA-2005-562.html	CVE
http://www.redhat.com/support/errata/RHSA-2005-567.html	CVE
http://www.securityfocus.com/bid/14236	CVE
http://www.trustix.org/errata/2005/0036	CVE
http://www.turbolinux.com/security/2005/TLSA-2005-78.txt	CVE
http://www.vupen.com/english/advisories/2005/1066	CVE
http://www.vupen.com/english/advisories/2006/2074	CVE
ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc	[email protected]
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html	[email protected]
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html	[email protected]
http://marc.info/?l=bugtraq&m=112122123211974&w=2	[email protected]
http://secunia.com/advisories/16041	[email protected]
http://secunia.com/advisories/17135	[email protected]
http://secunia.com/advisories/17899	[email protected]
http://secunia.com/advisories/20364	[email protected]
http://securitytracker.com/id?1014460	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/21328	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A736	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9902	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1	[email protected]
https://usn.ubuntu.com/224-1/	[email protected]
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt	[email protected]	PatchVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474	[email protected]
http://www.debian.org/security/2005/dsa-757	[email protected]	PatchVendor Advisory
http://www.kb.cert.org/vuls/id/885830	[email protected]	PatchThird Party AdvisoryUS Government Resource
http://www.novell.com/linux/security/advisories/2005_17_sr.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2005-562.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2005-567.html	[email protected]
http://www.securityfocus.com/bid/14236	[email protected]
http://www.trustix.org/errata/2005/0036	[email protected]
http://www.turbolinux.com/security/2005/TLSA-2005-78.txt	[email protected]
http://www.vupen.com/english/advisories/2005/1066	[email protected]
http://www.vupen.com/english/advisories/2006/2074	[email protected]

see all 52 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
mit kerberos 5	1.3 1.3.1 1.3.2 1.3.3 1.3.4
CPE cpe:2.3:a:mit:kerberos_5:1.3:::::::* cpe:2.3:a:mit:kerberos_5:1.3.1:::::::* cpe:2.3:a:mit:kerberos_5:1.3.2:::::::* cpe:2.3:a:mit:kerberos_5:1.3.3:::::::* cpe:2.3:a:mit:kerberos_5:1.3.4:::::::* cpe:2.3:a:mit:kerberos_5:1.3.5:::::::* cpe:2.3:a:mit:kerberos_5:1.3.6:::::::* cpe:2.3:a:mit:kerberos_5:1.4:::::::* cpe:2.3:a:mit:kerberos_5:1.4.1:::::::* Remediation No remediation found in references.

Product

Versions

mit kerberos 5

1.3

1.3.1

1.3.2

1.3.3

1.3.4

CPE

cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

19 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 20, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Oct 3, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 12, 2017	CVE Modified	[email protected]
Jul 11, 2017	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jul 18, 2005	Initial Analysis	[email protected]