CVE-2007-5971

MEDIO 6.9CVE-2007-5971 · Published 06/12/2007 · updated 16/06/2026

En resumen

CVE-2007-5971 es una vulnerabilidad MEDIO (CVSS 6.9) que afecta a kerberos 5 (mit).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.37%, mayor que el 31.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
kerberos 5 mit	`≤ 1.6.3_kdc`	No fix yet

Description

Double free vulnerability in the gss_krb5int_make_seal_token_v3 function in lib/gssapi/krb5/k5sealv3.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors.

References

bugs.gentoo.org/show_bug.cgi
docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
osvdb.org/43345
seclists.org/fulldisclosure/2007/Dec/0176.html
seclists.org/fulldisclosure/2007/Dec/0321.html
secunia.com/advisories/28636 · Vendor Advisory
secunia.com/advisories/29420
secunia.com/advisories/29450
secunia.com/advisories/29451
secunia.com/advisories/29457
secunia.com/advisories/29462
secunia.com/advisories/29464
secunia.com/advisories/29516
secunia.com/advisories/39290
secunia.com/advisories/39784

Más vulnerabilidades de kerberos 5

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free