CVE-2004-1189: mit kerberos_5 Out-of-bounds Write
Vulnerability summary
CVE-2004-1189 is a high (CVSS 7.2) Out-of-bounds Write vulnerability in mit kerberos_5. EPSS estimates a 0.73% chance of exploitation in the next 30 days, higher than 54.4% of scored vulnerabilities.
Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 31-12-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.73%
Chance of exploitation in the next 30 days
Percentile
54%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.73% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat6 products
- krb5< 0:1.3.4-10
- krb5-debuginfo< 0:1.3.4-10
- krb5-devel< 0:1.3.4-10
- krb5-libs< 0:1.3.4-10
- krb5-server< 0:1.3.4-10
Debian1 product
- krb5< 1.2.4-5woody7 | < 1.3.6-1
Mit1 product
- kerberos_5≤ 1.3.5
3 vendors · 8 products
References
22 links- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917Vendor AdvisoryX Refsource CONECTIVABroken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
- www.redhat.com/support/errata/RHSA-2005-012.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- lists.apple.com/archives/security-announce/2005/Aug/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- marc.info?l=bugtraq&m=110548298407590&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
- web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txtX Refsource CONFIRMPatchVendor Advisory
- lists.apple.com/archives/security-announce/2005//Aug/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2005-045.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
Show all 22 references
- marc.info?l=bugtraq&m=110358420909358&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2004:156Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
