CVE-2007-0957
NoneCVSS
—
EPSS
10.3%
Published
Apr 6, 2007
CISA due date
—
The record
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | krb5 | 0 | 1.4.4-8 |
| Debian:11 | krb5 | 0 | 1.4.4-8 |
| Debian:12 | krb5 | 0 | 1.4.4-8 |
| Debian:13 | krb5 | 0 | 1.4.4-8 |
| Debian:3.1 | krb5 | 0 | 1.3.6-2sarge4 |
| Debian:4.0 | krb5 | 0 | 1.4.4-7etch1 |
| Red Hat:enterprise_linux:2.1::as | krb5 | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::as | krb5-devel | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::as | krb5-libs | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::as | krb5-server | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::as | krb5-workstation | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::aw | krb5 | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::aw | krb5-devel | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::aw | krb5-libs | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::aw | krb5-server | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::aw | krb5-workstation | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::es | krb5 | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::es | krb5-devel | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::es | krb5-libs | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::es | krb5-server | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::es | krb5-workstation | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::ws | krb5 | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::ws | krb5-devel | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::ws | krb5-libs | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::ws | krb5-server | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:2.1::ws | krb5-workstation | 0 | 0:1.2.2-44 |
| Red Hat:enterprise_linux:3::as | krb5 | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::as | krb5-debuginfo | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::as | krb5-devel | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::as | krb5-libs | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::as | krb5-server | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::as | krb5-workstation | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5 | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5-debuginfo | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5-devel | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5-libs | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5-server | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::desktop | krb5-workstation | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5 | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5-debuginfo | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5-devel | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5-libs | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5-server | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::es | krb5-workstation | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5 | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5-debuginfo | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5-devel | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5-libs | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5-server | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:3::ws | krb5-workstation | 0 | 0:1.2.7-61 |
| Red Hat:enterprise_linux:4::as | krb5 | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::as | krb5-debuginfo | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::as | krb5-devel | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::as | krb5-libs | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::as | krb5-server | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::as | krb5-workstation | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5 | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5-debuginfo | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5-devel | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5-libs | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5-server | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::desktop | krb5-workstation | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5 | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5-debuginfo | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5-devel | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5-libs | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5-server | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::es | krb5-workstation | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5 | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5-debuginfo | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5-devel | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5-libs | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5-server | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:4::ws | krb5-workstation | 0 | 0:1.3.4-46 |
| Red Hat:enterprise_linux:5::client | krb5 | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client | krb5-debuginfo | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client | krb5-devel | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client | krb5-libs | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client | krb5-server | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client | krb5-workstation | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5 | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-debuginfo | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-devel | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-libs | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-server | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::client_workstation | krb5-workstation | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5 | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5-debuginfo | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5-devel | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5-libs | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5-server | 0 | 0:1.5-23 |
| Red Hat:enterprise_linux:5::server | krb5-workstation | 0 | 0:1.5-23 |
| openSUSE:Tumbleweed | krb5 | 0 | 1.19.2-2.2 |
Related vulnerabilities
- CVE-2011-4862 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… Also affects krb5
- CVE-2009-3295 The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral… Also affects krb5
- CVE-2008-0062 KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message… Also affects krb5
- CVE-2007-3999 Stack-based buffer overflow in the svcauth_gss_validate function in… Also affects krb5
- CVE-2007-2442 The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and… Also affects krb5
- CVE-2007-0956 The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass… Also affects krb5
- CVE-2005-1689 Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1… Also affects krb5
- CVE-2005-0488 Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow… Also affects krb5