PT-2007-6898 · Mit+1 · Mit Kerberos 5+1

Publicado 2007-12-06 · Atualizado 2024-06-15 · CVE-2007-5971

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) (affected versions not specified)

Description A double free vulnerability exists in the gss krb5int make seal token v3 function in lib/gssapi/krb5/k5sealv3.c. The impact and attack vectors of this issue are unknown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-5971

OPENSUSE-SU-2024:10899-1

RHSA-2008:0164

RHSA-2008:0180

RHSA-2008_0164

RHSA-2008_0180

Produtos afetados

Mit Kerberos 5

Red Hat

Referências · 68

• https://nvd.nist.gov/vuln/detail/CVE-2007-5971 · Nota de Segurança
• http://ubuntu.com/usn/USN-940-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2008-0947 · Nota
• http://secunia.com/advisories/29420 · Nota
• https://suse.com/security/cve/CVE-2018-5729 · Nota
• https://suse.com/security/cve/CVE-2007-5972 · Nota
• https://suse.com/security/cve/CVE-2017-11368 · Nota
• http://security.gentoo.org/glsa/glsa-200803-31.xml · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2008:0164 · Nota
• https://suse.com/security/cve/CVE-2007-5894 · Nota
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-36222 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00537.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-5971 · Aviso do Fabricante
• http://secunia.com/advisories/28636 · Aviso do Fabricante