CVE

Id
29251  
CVE No.
CVE-2007-5894  
Status
Candidate  
Description
** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating " The "length" variable is only uninitialized if "auth_type" is neither the "KERBEROS_V4" nor "GSSAPI"; this condition cannot occur in the unmodified source code."  
Phase
Assigned (20071108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306693 29251 CVE-2007-5894 BUGTRAQ:20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
306694 29251 CVE-2007-5894 URL:http://www.securityfocus.com/archive/1/archive/1/489883/100/0/threaded  View
306695 29251 CVE-2007-5894 FULLDISC:20071208 MIT Kerberos 5: Multiple vulnerabilities  View
306696 29251 CVE-2007-5894 URL:http://seclists.org/fulldisclosure/2007/Dec/0176.html  View
306697 29251 CVE-2007-5894 FULLDISC:20071208 Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972]  View
306698 29251 CVE-2007-5894 URL:http://seclists.org/fulldisclosure/2007/Dec/0321.html  View
306699 29251 CVE-2007-5894 MISC:http://bugs.gentoo.org/show_bug.cgi?id=199205  View
306700 29251 CVE-2007-5894 CONFIRM:https://issues.rpath.com/browse/RPL-2012  View
306701 29251 CVE-2007-5894 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2008-0112  View
306702 29251 CVE-2007-5894 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112  View
306703 29251 CVE-2007-5894 SUSE:SUSE-SR:2008:002  View
306704 29251 CVE-2007-5894 URL:http://www.novell.com/linux/security/advisories/suse_security_summary_report.html  View
306705 29251 CVE-2007-5894 BID:26750  View
306706 29251 CVE-2007-5894 URL:http://www.securityfocus.com/bid/26750  View
306707 29251 CVE-2007-5894 OSVDB:44333  View
306708 29251 CVE-2007-5894 URL:http://osvdb.org/44333  View
306709 29251 CVE-2007-5894 SECUNIA:28636  View
306710 29251 CVE-2007-5894 URL:http://secunia.com/advisories/28636  View
306711 29251 CVE-2007-5894 SECUNIA:29457  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55919 JVNDB-2007-004611 Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 Mozilla Firefox には、サービス運用妨害 (CPU の消費およびクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-5896 29251 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004611.html  View