CVE-2007-2442

CRITICAL 10.0CVE-2007-2442 · Published 26/06/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
kerberos 5 mit	`≤ 1.6.1`	No fix yet

Description

The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.

References

patches.sgi.com/support/free/security/advisories/20070602-01-P.asc · Broken Link
docs.info.apple.com/article.html · Broken Link
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp · Broken Link
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Mailing List
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html · Third Party Advisory
osvdb.org/36596 · Broken Link
secunia.com/advisories/25800 · Broken Link
secunia.com/advisories/25801 · Broken Link
secunia.com/advisories/25814 · Broken Link
secunia.com/advisories/25821 · Broken Link
secunia.com/advisories/25841 · Broken Link
secunia.com/advisories/25870 · Broken Link
secunia.com/advisories/25888 · Broken Link
secunia.com/advisories/25890 · Broken Link
secunia.com/advisories/25894 · Broken Link
secunia.com/advisories/25911 · Broken Link
secunia.com/advisories/26033 · Broken Link
secunia.com/advisories/26228 · Broken Link
secunia.com/advisories/26235 · Broken Link
secunia.com/advisories/26909 · Broken Link
secunia.com/advisories/27706 · Broken Link
secunia.com/advisories/40346 · Broken Link
security.gentoo.org/glsa/glsa-200707-11.xml · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt · Patch
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt · Patch
debian.org/security/2007/dsa-1323 · Third Party Advisory
kb.cert.org/vuls/id/356961 · Patch
mandriva.com/security/advisories · Third Party Advisory
novell.com/linux/security/advisories/2007_38_krb5.html · Broken Link
redhat.com/support/errata/RHSA-2007-0384.html · Broken Link
redhat.com/support/errata/RHSA-2007-0562.html · Broken Link
securityfocus.com/archive/1/472288/100/0/threaded · Broken Link
securityfocus.com/archive/1/472432/100/0/threaded · Broken Link
securityfocus.com/archive/1/472507/30/5970/threaded · Broken Link
securityfocus.com/bid/24655 · Broken Link
securityfocus.com/bid/25159 · Broken Link
securitytracker.com/id · Broken Link
trustix.org/errata/2007/0021 · Broken Link
ubuntu.com/usn/usn-477-1 · Third Party Advisory
us-cert.gov/cas/techalerts/TA07-177A.html · Broken Link
vupen.com/english/advisories/2007/2337 · Broken Link
vupen.com/english/advisories/2007/2354 · Broken Link
vupen.com/english/advisories/2007/2491 · Broken Link
vupen.com/english/advisories/2007/2732 · Broken Link
vupen.com/english/advisories/2007/3229 · Broken Link
vupen.com/english/advisories/2010/1574 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/35082 · Third Party Advisory
issues.rpath.com/browse/RPL-1499 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7344 · Broken Link
secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free