CVE Vulnerability

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. NOTE: this issue probably affects other daemons that attempt to initialize this library within a chroot configuration or other invalid configuration.

7.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

Scope

References
Link Resource
https://secure-support.novell.com/KanisaPlatform/Publishing/936/3665923_f.SAL_Public.html Patch
http://www.securityfocus.com/bid/26076 Patch
http://secunia.com/advisories/27189 Vendor Advisory
http://osvdb.org/40935
https://exchange.xforce.ibmcloud.com/vulnerabilities/37233
Configurations

Configuration 1

cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_server:*:*:*:*:*
Information

Published : 2007-10-16 12:17

Updated : 2017-07-29 01:33

NVD link : CVE-2007-5471

Mitre link : CVE-2007-5471

Products Affected
No products.
CWE
NVD-CWE-Other