PT-2007-1083 · Mit+1 · Mit-Krb5+1

Published 2007-04-03 · Updated 2024-06-15 · CVE-2007-0957

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: MIT krb5 versions prior to 1.6.1

Description: The issue is related to a stack-based buffer overflow in the krb5 klog syslog function within the kadm5 library. This library is used by the Kerberos administration daemon (kadmind) and the Key Distribution Center (KDC). The overflow can be triggered by remote authenticated users who provide crafted arguments, potentially involving certain format string specifiers. This could allow the execution of arbitrary code and modification of the Kerberos key database.

Recommendations: For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the krb5 klog syslog function until a patch is available.

Fix

Memory Corruption

Missing Authentication

Weakness Enumeration

CWE-787

CWE-306

Related Identifiers

BDU:2015-09557

CVE-2007-0957

DSA-1276-1

OPENSUSE-SU-2024:10899-1

RHSA-2007:0095

RHSA-2007_0095

Affected Products

Mit-Krb5

Red Hat

References · 68

• http://redhat.com/support/errata/RHSA-2007-0095.html · Vendor Advisory
• http://ubuntu.com/usn/usn-449-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200704-02.xml · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10899-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0957 · Vendor Advisory
• http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-0957 · Vendor Advisory
• http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html · Vendor Advisory
• http://debian.org/security/2007/dsa-1276 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-0957 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09557 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-0957 · Security Note
• http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html · Vendor Advisory