PT-2007-6898 · Mit+1 · Mit Kerberos 5+1

Published 2007-12-06 · Updated 2024-06-15 · CVE-2007-5971

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) (affected versions not specified)

Description A double free vulnerability exists in the gss krb5int make seal token v3 function in lib/gssapi/krb5/k5sealv3.c. The impact and attack vectors of this issue are unknown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-5971

OPENSUSE-SU-2024:10899-1

RHSA-2008:0164

RHSA-2008:0180

RHSA-2008_0164

RHSA-2008_0180

Affected Products

Mit Kerberos 5

Red Hat

References · 68

• https://nvd.nist.gov/vuln/detail/CVE-2007-5971 · Security Note
• http://ubuntu.com/usn/USN-940-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200803-31.xml · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00537.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-5971 · Vendor Advisory
• http://secunia.com/advisories/28636 · Vendor Advisory
• http://ubuntu.com/usn/usn-924-1 · Vendor Advisory
• http://securityfocus.com/bid/26750 · Patch
• https://redhat.com/archives/fedora-package-announce/2008-March/msg00544.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-5971 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:070 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:069 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10899-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-5971 · Vendor Advisory