Intrusion PreventionMIT.Kerberos.5.KDC.TCP.Handling.DoS
Description
This indicates an attempt to exploit a denial-of-service vulnerability in Kerberos.
The vulnerability is caused by a double-free error in the "krb5_recvauth()" function. An unauthenticated remote attacker can exploit this vulnerability to cause a denial of service.
Affected Products
Kerberos 5.x
Impact
Denial of Service
Recommended Actions
Apply the patches from the following websites:
http://web.mit.edu/kerberos/advisories/2005-003-patch_1.4.1.txt
http://web.mit.edu/kerberos/advisories/2005-002-patch_1.4.1.txt
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-11-22 | 15.729 | Name:MIT. Kerberos. V5. KDC. TCP. Handling. DoS:MIT. Kerberos. 5. KDC. TCP. Handling. DoS |
| ID | 15737 |
| Created | Aug 12, 2008 |
| Updated | Nov 05, 2021 |
| Risk |
|
| CVE ID | CVE-2005-1174 |
| Exploit Prediction Score | 74.63% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, Solaris, MacOS |
| Affected App | Other |