CVE-2004-0772

Critical

Published: 20/10/2004(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.

Risk Assessment

The risk is the potential for remote code execution, which could lead to full system compromise.

Recommendation

It is recommended to immediately upgrade MIT Kerberos 5 to a version later than 1.2.8, which fixes this vulnerability.

Original NVD description (English source)

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.