Home > Vulnerability Database > CVE-2007-0957

Mend.io Vulnerability Database

CVE-2007-0957

Date: April 5, 2007

Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.

Severity Score

8.8

Related Resources (39)

Url: http://www.securityfocus.com/archive/1/464814/30/7170/threaded

Url: http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html

Url: http://www.vupen.com/english/advisories/2007/1983

Url: http://www.securityfocus.com/archive/1/464666/100/0/threaded

Url: http://secunia.com/advisories/24966

Url: http://www.securitytracker.com/id?1017849

Url: http://secunia.com/advisories/24706

Url: http://www.vupen.com/english/advisories/2007/1218

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:077

Url: http://www.ubuntu.com/usn/usn-449-1

Url: http://www.redhat.com/support/errata/RHSA-2007-0095.html

Url: http://www.securityfocus.com/bid/23285

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/33411

Url: http://secunia.com/advisories/24785

Url: http://secunia.com/advisories/24786

Url: http://www.us-cert.gov/cas/techalerts/TA07-093B.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757

Url: http://secunia.com/advisories/24740

Url: http://docs.info.apple.com/article.html?artnum=305391

Url: http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1

Url: http://www.vupen.com/english/advisories/2007/1250

Url: http://secunia.com/advisories/24817

Url: http://www.vupen.com/english/advisories/2007/1470

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-0957

Url: http://www.debian.org/security/2007/dsa-1276

Url: http://www.securityfocus.com/archive/1/464592/100/0/threaded

Url: http://secunia.com/advisories/24735

Url: http://secunia.com/advisories/24757

Url: http://security.gentoo.org/glsa/glsa-200704-02.xml

Url: http://secunia.com/advisories/24798

Url: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt

Url: http://secunia.com/advisories/24736

Url: ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc

Url: http://www.kb.cert.org/vuls/id/704024

Url: http://secunia.com/advisories/25464

Url: http://www.us-cert.gov/cas/techalerts/TA07-109A.html

Url: http://secunia.com/advisories/24750

Url: https://www.mend.io/vulnerability-database/CVE-2007-0957

Severity Score

8.8

Weakness Type (CWE)

Out-of-bounds Write

CWE-787

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-0957

Date: April 5, 2007

Severity Score

Related Resources (39)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?