CVE-2005-1689: Apple Mac OS X

Critical severity, CVSS 9.8. EPSS: 11% chance of exploitation in the next 30 days.

Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

Affected products

• Apple Mac OS X: before 10.4.2 (fixed in 10.4.2)
• Apple Mac OS X Server: before 10.4.2 (fixed in 10.4.2)
• Debian Debian Linux: version 3.0 only; version 3.1 only
• Mit Kerberos 5: up to and including 1.4.1

Published 2005-07-18. Last modified 2026-06-16.