Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5972
HistoryDec 05, 2007 - 12:00 a.m.

CVE-2007-5972

2007-12-0500:00:00
ubuntu.com
ubuntu.com
6

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.4%

Double free vulnerability in the krb5_def_store_mkey function in
lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and
remote authenticated attack vectors. NOTE: the free operations occur in
code that stores the krb5kdc master key, and so the attacker must have
privileges to store this key.

Notes

Author Note
kees upstream does not feel this is a security issue
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkrb5< 1.4.3-5ubuntu0.11UNKNOWN
ubuntu8.04noarchkrb5< 1.6.dfsg.3~beta1-2ubuntu1.4UNKNOWN

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.4%

Related for UB:CVE-2007-5972