NVD

Id
53169  
Name
CVE-2007-0957  
Description
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-03-07  
Seq
2007-0957  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269001 53169 CVE-2007-0957 20070401-01-P  View
269002 53169 CVE-2007-0957 http://docs.info.apple.com/article.html?artnum=305391  View
269003 53169 CVE-2007-0957 APPLE-SA-2007-04-19  View
269004 53169 CVE-2007-0957 SUSE-SA:2007:025  View
269005 53169 CVE-2007-0957 oval:org.mitre.oval:def:10757  View
269006 53169 CVE-2007-0957 GLSA-200704-02  View
269007 53169 CVE-2007-0957 102930  View
269008 53169 CVE-2007-0957 http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt  View
269009 53169 CVE-2007-0957 DSA-1276  View
269010 53169 CVE-2007-0957 VU#704024  View
269011 53169 CVE-2007-0957 MDKSA-2007:077  View
269012 53169 CVE-2007-0957 RHSA-2007:0095  View
269013 53169 CVE-2007-0957 20070403 MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957]  View
269014 53169 CVE-2007-0957 20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
269015 53169 CVE-2007-0957 20070405 FLEA-2007-0008-1: krb5  View
269016 53169 CVE-2007-0957 23285  View
269017 53169 CVE-2007-0957 1017849  View
269018 53169 CVE-2007-0957 USN-449-1  View
269019 53169 CVE-2007-0957 TA07-093B  View
269020 53169 CVE-2007-0957 TA07-109A  View
269021 53169 CVE-2007-0957 ADV-2007-1218  View
269022 53169 CVE-2007-0957 ADV-2007-1250  View
269023 53169 CVE-2007-0957 ADV-2007-1470  View
269024 53169 CVE-2007-0957 ADV-2007-1983  View
269025 53169 CVE-2007-0957 kerberos-krb5klogsyslog-bo(33411)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51594 JVNDB-2007-000256 MIT Kerberos 5 krb5_klog_syslog() におけるスタックオーバーフローの脆弱性 MIT Kerberos 5 administration daemon の krb5_klog_syslog() の引数の取扱いに問題があるためスタックバッファオーバーフローの脆弱性が存在します。 CVE-2007-0957 24312 CVE-2007-0957 53169 9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000256.html 2007-04-03 2008-10-29 View