NVD

Id
56134  
Name
CVE-2007-4000  
Description
The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-05  
Modified Date
2011-03-07  
Seq
2007-4000  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285931 56134 CVE-2007-4000 oval:org.mitre.oval:def:9278  View
285932 56134 CVE-2007-4000 3092  View
285933 56134 CVE-2007-4000 http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt  View
285934 56134 CVE-2007-4000 GLSA-200709-01  View
285935 56134 CVE-2007-4000 VU#377544  View
285936 56134 CVE-2007-4000 MDKSA-2007:174  View
285937 56134 CVE-2007-4000 SUSE-SR:2007:019  View
285938 56134 CVE-2007-4000 RHSA-2007:0858  View
285939 56134 CVE-2007-4000 20070907 FLEA-2007-0050-1 krb5 krb5-workstation  View
285940 56134 CVE-2007-4000 25533  View
285941 56134 CVE-2007-4000 1018647  View
285942 56134 CVE-2007-4000 ADV-2007-3051  View
285943 56134 CVE-2007-4000 kerberos-modifypolicy-code-execution(36438)  View
285944 56134 CVE-2007-4000 https://bugzilla.redhat.com/show_bug.cgi?id=250976  View
285945 56134 CVE-2007-4000 https://issues.rpath.com/browse/RPL-1696  View
285946 56134 CVE-2007-4000 FEDORA-2007-2017  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51978 JVNDB-2007-000641 MIT Kerberos 5 kadmind に権限昇格の脆弱性 MIT Kerberos 5 kadmind には、権限昇格の脆弱性が存在します。 CVE-2007-4000 27355 CVE-2007-4000 56134 8.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000641.html 2007-09-04 2008-10-29 View