PT-2007-6837 · Mit+1 · Mit Kerberos 5+1

Publicado 2007-12-06 · Atualizado 2017-09-29 · CVE-2007-5901

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) (affected versions not specified)

Description A use-after-free issue exists in the gss indicate mechs function, located in lib/gssapi/mechglue/g initialize.c. The impact and attack vectors of this issue are unknown. It is speculated that this might be due to a typo in the source code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-5901

RHSA-2008:0164

RHSA-2008_0164

Produtos afetados

Mit Kerberos 5

Red Hat

Referências · 31

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=199214 · Exploit
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00544.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-5901 · Aviso do Fabricante
• http://osvdb.org/43346 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11451 · Nota
• http://secunia.com/advisories/29451 · Nota
• http://security.gentoo.org/glsa/glsa-200803-31.xml · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0164 · Nota
• http://secunia.com/advisories/29464 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:069 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-0062 · Nota
• https://bdu.fstec.ru/vul/2015-06278 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00537.html · Aviso do Fabricante
• https://issues.rpath.com/browse/RPL-2012 · Nota