7.6 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.965 High
EPSS
Percentile
99.6%
CentOS Errata and Security Advisory CESA-2007:0562
Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC. kadmind is the KADM5 administration
server.
David Coffey discovered an uninitialized pointer free flaw in the RPC
library used by kadmind. On Red Hat Enterprise Linux 4 and 5, glibc
detects attempts to free invalid pointers. A remote unauthenticated
attacker who can access kadmind could trigger this flaw and cause kadmind
to crash. (CVE-2007-2442)
David Coffey also discovered an overflow flaw in the RPC library used by
kadmind. On Red Hat Enterprise Linux, exploitation of this flaw is limited
to a denial of service. A remote unauthenticated attacker who can access
kadmind could trigger this flaw and cause kadmind to crash. (CVE-2007-2443)
A stack buffer overflow flaw was found in kadmind. An authenticated
attacker who can access kadmind could trigger this flaw and potentially
execute arbitrary code on the Kerberos server. (CVE-2007-2798)
Users of krb5-server are advised to update to these erratum packages which
contain backported fixes to correct these issues.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-June/076144.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076145.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076150.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076151.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076166.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076171.html
Affected packages:
krb5-devel
krb5-libs
krb5-server
krb5-workstation
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0562
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 4 | i386 | krb5-devel | < 1.3.4-49 | krb5-devel-1.3.4-49.i386.rpm |
CentOS | 4 | i386 | krb5-libs | < 1.3.4-49 | krb5-libs-1.3.4-49.i386.rpm |
CentOS | 4 | i386 | krb5-server | < 1.3.4-49 | krb5-server-1.3.4-49.i386.rpm |
CentOS | 4 | i386 | krb5-workstation | < 1.3.4-49 | krb5-workstation-1.3.4-49.i386.rpm |
CentOS | 4 | x86_64 | krb5-devel | < 1.3.4-49 | krb5-devel-1.3.4-49.x86_64.rpm |
CentOS | 4 | i386 | krb5-libs | < 1.3.4-49 | krb5-libs-1.3.4-49.i386.rpm |
CentOS | 4 | x86_64 | krb5-libs | < 1.3.4-49 | krb5-libs-1.3.4-49.x86_64.rpm |
CentOS | 4 | x86_64 | krb5-server | < 1.3.4-49 | krb5-server-1.3.4-49.x86_64.rpm |
CentOS | 4 | x86_64 | krb5-workstation | < 1.3.4-49 | krb5-workstation-1.3.4-49.x86_64.rpm |
CentOS | 5 | i386 | krb5-devel | < 1.5-26 | krb5-devel-1.5-26.i386.rpm |