PT-2007-1069 · Mit+3 · Mit-Krb5+4

Published 2007-09-04 · Updated 2024-06-15 · CVE-2007-3999

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 versions 1.4 through 1.6.2 nfs-utils-lib versions 1.0.6 nfs-utils-lib-devel versions 1.0.6 mit-krb5 versions prior to 1.5.3-r1

Description: The issue is related to a stack-based buffer overflow in the svcauth gss validate function in lib/rpc/svc auth gss.c in the RPCSEC GSS RPC library, which can be exploited remotely. This can lead to a denial of service (daemon crash) and potentially allow the execution of arbitrary code via a long string in an RPC message. The vulnerability can be exploited to disrupt the confidentiality, integrity, and availability of protected information.

Recommendations: For MIT Kerberos 5 versions 1.4 through 1.6.2, update to a version later than 1.6.2. For nfs-utils-lib versions 1.0.6, consider disabling the vulnerable component until a patch is available. For nfs-utils-lib-devel versions 1.0.6, restrict access to the vulnerable module to minimize the risk of exploitation. For mit-krb5 versions prior to 1.5.3-r1, update to version 1.5.3-r1 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-07449

BDU:2015-07450

BDU:2015-09590

CVE-2007-3999

DSA-1367-1

DSA-1368-1

OPENSUSE-SU-2024:10899-1

OPENSUSE-SU-2024:11002-1

RHSA-2007:0858

RHSA-2007:0913

RHSA-2007:0951

RHSA-2007_0858

RHSA-2007_0913

RHSA-2007_0951

Affected Products

Mit Kerberos 5

Red Hat

Mit-Krb5

Nfs-Utils-Lib

Nfs-Utils-Lib-Devel

References · 98

• http://secunia.com/advisories/26783 · Vendor Advisory
• http://secunia.com/advisories/26691 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103060-1 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200709-01.xml · Vendor Advisory
• http://secunia.com/advisories/26728 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07450 · Security Note
• http://secunia.com/advisories/26705 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200710-01.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-3999 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0858.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_24_sr.html · Vendor Advisory
• http://secunia.com/advisories/26684 · Vendor Advisory
• http://debian.org/security/2007/dsa-1368 · Vendor Advisory
• http://secunia.com/advisories/26700 · Vendor Advisory
• http://secunia.com/advisories/26792 · Vendor Advisory