Skip to content
OpenAdvisories
Unscored RHSA-2005:562 4 CVEs

Red Hat Security Advisory: krb5 security update

Published Nov 5, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as krb5 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::as krb5-debuginfo 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::as krb5-devel 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::as krb5-libs 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::as krb5-server 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::as krb5-workstation 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-debuginfo 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-devel 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-libs 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-server 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::desktop krb5-workstation 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5-debuginfo 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5-devel 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5-libs 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5-server 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::es krb5-workstation 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-debuginfo 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-devel 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-libs 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-server 0:1.2.7-47
Red Hat · RHEL 3 enterprise_linux:3::ws krb5-workstation 0:1.2.7-47

Vulnerabilities 4

  • Unscored —
    CVE-2004-0175

    Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrar…

    openssh Debian
  • Unscored —
    CVE-2005-0488 EPSS 17%

    Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers…

    krb5 Debian
  • Unscored —
    CVE-2005-1175

    Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remot…

    krb5 Debian
  • Unscored —
    CVE-2005-1689 EPSS 11%

    Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attack…

    krb5 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt
  • article
    http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-002-kdc.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=159304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=159753
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=161471
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=161611
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=162255
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_562.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0175
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0175
  • report
    https://access.redhat.com/security/cve/CVE-2005-0488
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617531
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0488
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0488
  • report
    https://access.redhat.com/security/cve/CVE-2005-1175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617614
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1175
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1175
  • report
    https://access.redhat.com/security/cve/CVE-2005-1689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617659
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1689