APP: Kerberos Heap Double Free

This signature detects attempts to exploit a known "double free" vulnerability in the Kerberos protocol. A successful attack can lead to remote arbitrary code execution. Note: this signature should not be utilized on a network running Kerberos 5 1.1 or higher.

Extended Description

MIT Kerberos 5 is prone to a remote double-free vulnerability. Remote attackers can trigger this issue prior to any authentication whatsoever. The issue exists in the 'revcauth_common()' helper function. Because of the code path taken in the vulnerable function, exploitation may be hindered. However, attackers may presumably leverage this issue to execute arbitrary code in the context of the affected service. Note that successful exploitation of this issue on a Kerberos Key Distribution Center (KDC) computer may result in the compromise of an entire Kerberos realm.

Affected Products

Mandriva corporate_server

References

BugTraq: 14239

CVE: CVE-2005-1689

URL: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt http://www.kb.cert.org/vuls/id/623332

Short Name

APP:KERBEROS:DBLFREE

Severity

Minor

Recommended

False

Recommended Action

Drop

APP: Kerberos Heap Double Free

Extended Description

Affected Products

References

Found a potential security threat?