SUSE CVE-2004-0772

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 krb5 1.2.8 and earlier may allow remote attackers to execute arbitrary code...

PT-2004-1848 · Mit · Mit Kerberos 5

Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 krb5 versions 1.2.8 and earlier Description: The issue is related to double free vulnerabilities in error handling code in krb524d, which may allow remote attackers to execute arbitrary code. Recommendations: For MIT Kerberos 5...

MIT Kerberos krb524d insecurely deallocates memory (double-free)

Overview The MIT Kerberos krb524d daemon does not securely deallocate heap memory when handling an error condition, resulting in a double-free vulnerability. An unauthenticated, remote attacker could execute arbitrary code on a system running krb524d, which in many cases is also a Kerberos...