Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2007-4000
HistorySep 05, 2007 - 10:17 a.m.

Null pointer dereference

2007-09-0510:17:00
PRIOn knowledge base
www.prio-n.com
3

7.3 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.338 Low

EPSS

Percentile

96.9%

JSON

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the β€œmodify policy” privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

CPENameOperatorVersion
fedoraeq7
kerberos_5ge1.5
kerberos_5le1.6.2

References

Related

cve 1
seebug 1
ubuntucve 2
debiancve 1
cert 1
fedora 4
nessus 13
openvas 14
gentoo 1
redhat 1
oraclelinux 1
centos 1
cve
cve
CVE-2007-4000
2007-09-05 10:17:00
seebug
seebug
MIT Kerberos 5 KAdminDζœεŠ‘η¨‹εΊζœͺεˆε§‹εŒ–ζŒ‡ι’ˆθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2007-09-06 00:00:00
ubuntucve
ubuntucve
CVE-2007-4000
2007-09-05 00:00:00
CVE-2007-4743
2007-09-06 00:00:00
debiancve
debiancve
CVE-2007-4000
2007-09-05 10:17:00
cert
cert
MIT Kerberos 5 kadmind privilege escalation vulnerability
2007-09-04 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: krb5-1.5-22.fc6
2007-09-04 21:28:43
[SECURITY] Fedora 7 Update: krb5-1.6.1-3.fc7
2007-09-04 22:14:03
[SECURITY] Fedora 7 Update: krb5-1.6.1-4.fc7
2007-09-07 17:21:06
nessus
nessus
SuSE 10 Security Update : Kerberos (ZYPP Patch Number 4192)
2007-12-13 00:00:00
GLSA-200709-01 : MIT Kerberos 5: Multiple vulnerabilities
2007-09-14 00:00:00
Fedora 7 : krb5-1.6.1-3.fc7 (2007-2017)
2007-11-06 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200709-01 (mit-krb5)
2008-09-24 00:00:00
Mandriva Update for krb5 MDKSA-2007:174 (krb5)
2009-04-09 00:00:00
Gentoo Security Advisory GLSA 200709-01 (mit-krb5)
2008-09-24 00:00:00
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2007-09-11 00:00:00
redhat
redhat
(RHSA-2007:0858) Important: krb5 security update
2007-09-04 00:00:00
oraclelinux
oraclelinux
Important: krb5 security update
2007-09-04 00:00:00
centos
centos
krb5 security update
2007-09-05 00:50:27

7.3 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.338 Low

EPSS

Percentile

96.9%

JSON
Related for PRION:CVE-2007-4000
cve1seebug1ubuntucve2debiancve1cert1fedora4nessus13openvas14gentoo1redhat1oraclelinux1centos1