CVE - CVE-2007-1216

CVE-ID
CVE-2007-1216	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation URL:http://www.securityfocus.com/archive/1/464666/100/0/threaded BUGTRAQ:20070403 MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216] URL:http://www.securityfocus.com/archive/1/464591/100/0/threaded BUGTRAQ:20070405 FLEA-2007-0008-1: krb5 URL:http://www.securityfocus.com/archive/1/464814/30/7170/threaded CONFIRM:http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-003.txt CONFIRM:http://docs.info.apple.com/article.html?artnum=305391 APPLE:APPLE-SA-2007-04-19 URL:http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html DEBIAN:DSA-1276 URL:http://www.debian.org/security/2007/dsa-1276 GENTOO:GLSA-200704-02 URL:http://security.gentoo.org/glsa/glsa-200704-02.xml HP:HPSBUX02217 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 HP:SSRT071337 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 MANDRIVA:MDKSA-2007:077 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 REDHAT:RHSA-2007:0095 URL:http://www.redhat.com/support/errata/RHSA-2007-0095.html SGI:20070401-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc SUSE:SUSE-SA:2007:025 URL:http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html UBUNTU:USN-449-1 URL:http://www.ubuntu.com/usn/usn-449-1 CERT:TA07-093B URL:http://www.us-cert.gov/cas/techalerts/TA07-093B.html CERT:TA07-109A URL:http://www.us-cert.gov/cas/techalerts/TA07-109A.html CERT-VN:VU#419344 URL:http://www.kb.cert.org/vuls/id/419344 BID:23282 URL:http://www.securityfocus.com/bid/23282 OVAL:oval:org.mitre.oval:def:11135 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11135 VUPEN:ADV-2007-1218 URL:http://www.vupen.com/english/advisories/2007/1218 VUPEN:ADV-2007-1470 URL:http://www.vupen.com/english/advisories/2007/1470 VUPEN:ADV-2007-1916 URL:http://www.vupen.com/english/advisories/2007/1916 SECTRACK:1017852 URL:http://www.securitytracker.com/id?1017852 SECUNIA:24706 URL:http://secunia.com/advisories/24706 SECUNIA:24736 URL:http://secunia.com/advisories/24736 SECUNIA:24757 URL:http://secunia.com/advisories/24757 SECUNIA:24740 URL:http://secunia.com/advisories/24740 SECUNIA:24750 URL:http://secunia.com/advisories/24750 SECUNIA:24785 URL:http://secunia.com/advisories/24785 SECUNIA:24786 URL:http://secunia.com/advisories/24786 SECUNIA:24817 URL:http://secunia.com/advisories/24817 SECUNIA:24735 URL:http://secunia.com/advisories/24735 SECUNIA:24966 URL:http://secunia.com/advisories/24966 SECUNIA:25388 URL:http://secunia.com/advisories/25388 XF:kerberos-kadmind-code-execution(33413) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/33413
Assigning CNA
N/A
Date Entry Created
20070302	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070302)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org