Lucene search

K
ubuntuUbuntuUSN-408-1
HistoryJan 16, 2007 - 12:00 a.m.

krb5 vulnerability

2007-01-1600:00:00
ubuntu.com
32

6.6 Medium

AI Score

Confidence

Low

0.609 Medium

EPSS

Percentile

97.8%

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06

Details

The server-side portion of Kerberos’ RPC library had a memory
management flaw which allowed users of that library to call a function
pointer located in unallocated memory. By doing specially crafted
calls to the kadmind server, a remote attacker could exploit this to
execute arbitrary code with root privileges on the target computer.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibkrb53< 1.4.3-9ubuntu1.1UNKNOWN
Ubuntu6.10noarchlibkadm55< 1.4.3-9ubuntu1.1UNKNOWN
Ubuntu6.06noarchlibkrb53< 1.4.3-5ubuntu0.2UNKNOWN
Ubuntu6.06noarchlibkadm55< 1.4.3-5ubuntu0.2UNKNOWN

6.6 Medium

AI Score

Confidence

Low

0.609 Medium

EPSS

Percentile

97.8%