Kerberos vulnerability

2007-09-0400:00:00

ubuntu.com

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.969 High

EPSS

Percentile

99.7%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

krb5 -
librpcsecgss -

Details

It was discovered that the libraries handling RPCSEC_GSS did not correctly
validate the size of certain packet structures. An unauthenticated remote
user could send a specially crafted request and execute arbitrary code
with root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibrpcsecgss3< 0.14-2ubuntu1.1UNKNOWN
Ubuntu7.04noarchlibrpcsecgss-dev< 0.14-2ubuntu1.1UNKNOWN
Ubuntu7.04noarchlibkadm55< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-admin-server< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-clients< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-ftpd< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-kdc< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-rsh-server< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-telnetd< 1.4.4-5ubuntu3.2UNKNOWN
Ubuntu7.04noarchkrb5-user< 1.4.4-5ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.04	noarch	librpcsecgss3	< 0.14-2ubuntu1.1	UNKNOWN
Ubuntu	7.04	noarch	librpcsecgss-dev	< 0.14-2ubuntu1.1	UNKNOWN
Ubuntu	7.04	noarch	libkadm55	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-admin-server	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-clients	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-ftpd	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-kdc	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-rsh-server	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-telnetd	< 1.4.4-5ubuntu3.2	UNKNOWN
Ubuntu	7.04	noarch	krb5-user	< 1.4.4-5ubuntu3.2	UNKNOWN