René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

207 lines
6.3 KiB
JSON

{
"id": "CVE-2005-1174",
"sourceIdentifier": "cve@mitre.org",
"published": "2005-07-18T04:00:00.000",
"lastModified": "2020-01-21T15:45:24.333",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory."
},
{
"lang": "es",
"value": "MIT Kerberos 5 (krb5) 1.3 hasta la 1.4.1 Key Distribution Center (KDC) permite que atacantes remotos causen una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) mediante ciertas conexiones v\u00e1lidas de TCP que provocan la liberaci\u00f3n de memoria no reservada."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "7F01A83F-3BD1-4DED-979A-B4B6B23039FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "ACEB5A36-8F72-417A-AC92-149612EC7BCB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "7B8704B5-F37B-4C61-A924-3774A29BFEB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "30AA5727-BD83-45CF-B308-BA5F8A577B9D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0E088E64-6FBD-4148-8F78-506364B7BB1E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "52F0EECF-7787-442B-9888-D22F7D36C3DE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EF344AED-BE00-4A9B-A9DE-C6FB0BEE4617"
}
]
}
]
}
],
"references": [
{
"url": "ftp://patches.sgi.com/support/free/security/advisories/20050703-01-U.asc",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html",
"source": "cve@mitre.org"
},
{
"url": "http://marc.info/?l=bugtraq&m=112122123211974&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1014460",
"source": "cve@mitre.org"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101809-1",
"source": "cve@mitre.org"
},
{
"url": "http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www-1.ibm.com/support/docview.wss?uid=swg1IY85474",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2005/dsa-757",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/259798",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
]
},
{
"url": "http://www.novell.com/linux/security/advisories/2005_17_sr.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2005-567.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/14240",
"source": "cve@mitre.org"
},
{
"url": "http://www.trustix.org/errata/2005/0036",
"source": "cve@mitre.org"
},
{
"url": "http://www.turbolinux.com/security/2005/TLSA-2005-78.txt",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2005/1066",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/2074",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21327",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10229",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A397",
"source": "cve@mitre.org"
},
{
"url": "https://usn.ubuntu.com/224-1/",
"source": "cve@mitre.org"
}
]
}