PT-2007-6837 · Mit+1 · Mit Kerberos 5+1

Published 2007-12-06 · Updated 2017-09-29 · CVE-2007-5901

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) (affected versions not specified)

Description A use-after-free issue exists in the gss indicate mechs function, located in lib/gssapi/mechglue/g initialize.c. The impact and attack vectors of this issue are unknown. It is speculated that this might be due to a typo in the source code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-5901

RHSA-2008:0164

RHSA-2008_0164

Affected Products

Mit Kerberos 5

Red Hat

References · 31

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=199214 · Exploit
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00544.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-5901 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-31.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:069 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06278 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00537.html · Vendor Advisory
• http://ubuntu.com/usn/usn-924-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0164.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5901 · Security Note
• http://securityfocus.com/bid/26750 · Patch
• https://osv.dev/vulnerability/CVE-2007-5901 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5901 · Vendor Advisory
• http://osvdb.org/43346 · Note