NVD

Id
54609  
Name
CVE-2007-2442  
Description
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-26  
Modified Date
2012-10-30  
Seq
2007-2442  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276959 54609 CVE-2007-2442 20070602-01-P  View
276960 54609 CVE-2007-2442 http://docs.info.apple.com/article.html?artnum=306172  View
276961 54609 CVE-2007-2442 HPSBUX02544  View
276962 54609 CVE-2007-2442 APPLE-SA-2007-07-31  View
276963 54609 CVE-2007-2442 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
276964 54609 CVE-2007-2442 oval:org.mitre.oval:def:10631  View
276965 54609 CVE-2007-2442 oval:org.mitre.oval:def:7344  View
276966 54609 CVE-2007-2442 GLSA-200707-11  View
276967 54609 CVE-2007-2442 102914  View
276968 54609 CVE-2007-2442 http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt  View
276969 54609 CVE-2007-2442 http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt  View
276970 54609 CVE-2007-2442 DSA-1323  View
276971 54609 CVE-2007-2442 VU#356961  View
276972 54609 CVE-2007-2442 MDKSA-2007:137  View
276973 54609 CVE-2007-2442 SUSE-SA:2007:038  View
276974 54609 CVE-2007-2442 RHSA-2007:0384  View
276975 54609 CVE-2007-2442 RHSA-2007:0562  View
276976 54609 CVE-2007-2442 20070626 MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities  View
276977 54609 CVE-2007-2442 20070628 FLEA-2007-0029-1: krb5 krb5-workstation  View
276978 54609 CVE-2007-2442 20070629 TSLSA-2007-0021 - kerberos5  View
276979 54609 CVE-2007-2442 24655  View
276980 54609 CVE-2007-2442 25159  View
276981 54609 CVE-2007-2442 1018293  View
276982 54609 CVE-2007-2442 2007-0021  View
276983 54609 CVE-2007-2442 USN-477-1  View
276984 54609 CVE-2007-2442 TA07-177A  View
276985 54609 CVE-2007-2442 ADV-2007-2337  View
276986 54609 CVE-2007-2442 ADV-2007-2354  View
276987 54609 CVE-2007-2442 ADV-2007-2491  View
276988 54609 CVE-2007-2442 ADV-2007-2732  View
276989 54609 CVE-2007-2442 ADV-2007-3229  View
276990 54609 CVE-2007-2442 ADV-2010-1574  View
276991 54609 CVE-2007-2442 kerberos-gssrpcsvcauthgssapi-code-execution(35082)  View
276992 54609 CVE-2007-2442 https://issues.rpath.com/browse/RPL-1499  View
276993 54609 CVE-2007-2442 https://secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51816 JVNDB-2007-000479 MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性 MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数には長さ 0 の RPC 認証データを処理した場合のクリーンアップコードに不備が存在するために、初期化されていないポインタが指すメモリ領域が解放される脆弱性が存在します。 CVE-2007-2442 25797 CVE-2007-2442 54609 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000479.html 2007-06-26 2010-07-15 View