CVE-2005-1174

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions 1.3 through 1.4.1

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved through a certain valid TCP connection that causes a free of unallocated memory.

Recommendations For versions 1.3 through 1.4.1, consider restricting access to the Key Distribution Center (KDC) to minimize the risk of exploitation until a patch is available.