NVD

Id
57928  
Name
CVE-2007-5902  
Description
Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-05  
Modified Date
2010-05-27  
Seq
2007-5902  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296538 57928 CVE-2007-5902 http://bugs.gentoo.org/show_bug.cgi?id=199214  View
296539 57928 CVE-2007-5902 20071208 MIT Kerberos 5: Multiple vulnerabilities  View
296540 57928 CVE-2007-5902 20071208 Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972]  View
296541 57928 CVE-2007-5902 USN-924-1  View
296542 57928 CVE-2007-5902 http://wiki.rpath.com/Advisories:rPSA-2008-0112  View
296543 57928 CVE-2007-5902 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112  View
296544 57928 CVE-2007-5902 SUSE-SR:2008:002  View
296545 57928 CVE-2007-5902 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
296546 57928 CVE-2007-5902 26750  View
296547 57928 CVE-2007-5902 USN-940-1  View
296548 57928 CVE-2007-5902 ADV-2010-1192  View
296549 57928 CVE-2007-5902 https://issues.rpath.com/browse/RPL-2012  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55921 JVNDB-2007-004613 krb5 の lib/rpc/svc_auth_gss.c における整数オーバーフローの脆弱性 MIT Kerberos 5 (krb5) の lib/rpc/svc_auth_gss.c の svcauth_gss_get_principal 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2007-5902 29257 CVE-2007-5902 57928 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004613.html 2007-12-05 2012-09-25 View