CVE-2007-2443

高 8.3CVE-2007-2443 · 26/06/2007 公開 · 16/06/2026 更新

要点

CVE-2007-2443 は kerberos 5 (mit) に影響する深刻度「高」 (CVSS 8.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：3.5%（全脆弱性の 89.1% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
kerberos 5 mit	`≤ 1.6.1`	修正版なし

概要

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.

参考情報

patches.sgi.com/support/free/security/advisories/20070602-01-P.asc · Broken Link
docs.info.apple.com/article.html · Broken Link
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp · Broken Link
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Mailing List
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html · Third Party Advisory
osvdb.org/36597 · Broken Link
secunia.com/advisories/25800 · Third Party Advisory
secunia.com/advisories/25801 · Third Party Advisory
secunia.com/advisories/25814 · Third Party Advisory
secunia.com/advisories/25821 · Third Party Advisory
secunia.com/advisories/25870 · Third Party Advisory
secunia.com/advisories/25888 · Third Party Advisory
secunia.com/advisories/25890 · Third Party Advisory
secunia.com/advisories/25894 · Third Party Advisory
secunia.com/advisories/25911 · Third Party Advisory
secunia.com/advisories/26033 · Third Party Advisory
secunia.com/advisories/26228 · Third Party Advisory
secunia.com/advisories/26235 · Third Party Advisory
secunia.com/advisories/26909 · Third Party Advisory
secunia.com/advisories/27706 · Third Party Advisory
secunia.com/advisories/40346 · Third Party Advisory
security.gentoo.org/glsa/glsa-200707-11.xml · Third Party Advisory
web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt · Patch
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt · Patch
debian.org/security/2007/dsa-1323 · Third Party Advisory
kb.cert.org/vuls/id/365313 · Patch
mandriva.com/security/advisories · Third Party Advisory
novell.com/linux/security/advisories/2007_38_krb5.html · Broken Link
redhat.com/support/errata/RHSA-2007-0384.html · Third Party Advisory
redhat.com/support/errata/RHSA-2007-0562.html · Third Party Advisory
securityfocus.com/archive/1/472288/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/472432/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/472507/30/5970/threaded · Third Party Advisory
securityfocus.com/bid/24657 · Third Party Advisory
securityfocus.com/bid/25159 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
trustix.org/errata/2007/0021 · Broken Link
ubuntu.com/usn/usn-477-1 · Third Party Advisory
us-cert.gov/cas/techalerts/TA07-177A.html · Patch
vupen.com/english/advisories/2007/2337 · Third Party Advisory
vupen.com/english/advisories/2007/2491 · Third Party Advisory
vupen.com/english/advisories/2007/2732 · Third Party Advisory
vupen.com/english/advisories/2007/3229 · Third Party Advisory
vupen.com/english/advisories/2010/1574 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35085 · Third Party Advisory
issues.rpath.com/browse/RPL-1499 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7131 · Broken Link
secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html · Broken Link

kerberos 5 のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン