CVE-2007-5901

2007-12-0500:00:00

ubuntu.com

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.5%

JSON

Use-after-free vulnerability in the gss_indicate_mechs function in
lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown
impact and attack vectors. NOTE: this might be the result of a typo in the
source code.

Notes

Author	Note
kees	upstream did not publish a security update for this issue

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchkrb5< 1.6.dfsg.3~beta1-2ubuntu1.4UNKNOWN
ubuntu9.04noarchkrb5< 1.6.dfsg.4~beta1-5ubuntu2.3UNKNOWN