Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2798
HistoryJun 26, 2007 - 12:00 a.m.

CVE-2007-2798

2007-06-2600:00:00
ubuntu.com
ubuntu.com
7

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.939 High

EPSS

Percentile

99.1%

Stack-based buffer overflow in the rename_principal_2_svc function in
kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote
authenticated users to execute arbitrary code via a crafted request to
rename a principal.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkrb5< 1.4.3-5ubuntu0.6UNKNOWN
ubuntu6.10noarchkrb5< 1.4.3-9ubuntu1.5UNKNOWN
ubuntu7.04noarchkrb5< 1.4.4-5ubuntu3.3UNKNOWN

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.939 High

EPSS

Percentile

99.1%