{"id":"DEBIAN-CVE-2004-1189","details":"The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.","modified":"2026-04-28T20:06:33.548859Z","published":"2004-12-31T05:00:00Z","upstream":["CVE-2004-1189"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2004-1189"}],"affected":[{"package":{"name":"krb5","ecosystem":"Debian:11","purl":"pkg:deb/debian/krb5?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2004-1189.json"}},{"package":{"name":"krb5","ecosystem":"Debian:12","purl":"pkg:deb/debian/krb5?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2004-1189.json"}},{"package":{"name":"krb5","ecosystem":"Debian:13","purl":"pkg:deb/debian/krb5?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2004-1189.json"}},{"package":{"name":"krb5","ecosystem":"Debian:14","purl":"pkg:deb/debian/krb5?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2004-1189.json"}}],"schema_version":"1.7.5"}