PT-2007-6899 · Mit · Mit Kerberos 5

Publicado 2007-12-06 · Atualizado 2024-06-15 · CVE-2007-5972

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) version 1.5

Description A double free vulnerability exists in the krb5 def store mkey function, which has unknown impact and can be exploited through remote authenticated attack vectors. The vulnerability is related to the storage of the krb5kdc master key, requiring the attacker to have privileges to store this key.

Recommendations For MIT Kerberos 5 (krb5) version 1.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5972

OPENSUSE-SU-2024:10899-1

Produtos afetados

Mit Kerberos 5

Referências · 38

• http://ubuntu.com/usn/USN-940-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2008-0947 · Nota
• https://suse.com/security/cve/CVE-2018-5729 · Nota
• http://bugs.gentoo.org/show_bug.cgi?id=199211 · Nota
• https://suse.com/security/cve/CVE-2007-5972 · Nota
• https://osv.dev/vulnerability/CVE-2007-5972 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-11368 · Nota
• https://suse.com/security/cve/CVE-2007-5894 · Nota
• https://suse.com/security/cve/CVE-2021-36222 · Nota
• http://secunia.com/advisories/28636 · Aviso do Fabricante
• http://securityfocus.com/bid/26750 · Nota
• http://ubuntu.com/usn/usn-924-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-2442 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5972 · Nota de Segurança
• http://seclists.org/fulldisclosure/2007/Dec/0321.html · Nota