CVE-2004-0642: Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Cente...

Security readout for executives and security teams

CVE-2004-0642 affects older MIT Kerberos 5 deployments. A flaw in ASN.1 decoder error handling can trigger a double free, potentially letting a remote attacker run code. Kerberos is often central to authentication, so exposure on a KDC deserves prompt attention even though the supplied record does not include CVSS data. Likely exposure is MIT Kerberos 5 version 1.3.4 or earlier, especially KDC infrastructure and systems using the vulnerable client library. Distribution advisories from Red Hat, Debian, Gentoo, Conectiva, Trustix, and OpenPKG indicate packaged OS exposure existed in 2004. Treat this as high priority where legacy Kerberos remains in use. A compromised KDC can undermine authentication for dependent systems. If no MIT krb5 1.3.4-era systems exist, priority drops to confirming inventory and scanner closure. Mitigation focus: Identify MIT krb5 KDC and client packages at version 1.3.4 or earlier.; Apply vendor security updates from the relevant OS or MIT Kerberos advisory.; Prioritize internet-reachable or cross-domain KDC services first..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.