CVE Vulnerability

CVE-2007-4000

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

8.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 6.8 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=250976
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt
http://www.redhat.com/support/errata/RHSA-2007-0858.html
https://issues.rpath.com/browse/RPL-1696
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html
http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:174
http://www.novell.com/linux/security/advisories/2007_19_sr.html
http://www.kb.cert.org/vuls/id/377544 US Government Resource
http://www.securityfocus.com/bid/25533
http://www.securitytracker.com/id?1018647
http://secunia.com/advisories/26680
http://secunia.com/advisories/26728
http://secunia.com/advisories/26676
http://secunia.com/advisories/26700
http://secunia.com/advisories/26783
http://secunia.com/advisories/26987
http://securityreason.com/securityalert/3092
http://www.vupen.com/english/advisories/2007/3051
https://exchange.xforce.ibmcloud.com/vulnerabilities/36438
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278
http://www.securityfocus.com/archive/1/478794/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*
Information

Published : 2007-09-05 10:17

Updated : 2020-01-21 03:45

NVD link : CVE-2007-4000

Mitre link : CVE-2007-4000

Products Affected
No products.
CWE
CWE-824

Access of Uninitialized Pointer