CVE-2007-2798

緊急 9.0CVE-2007-2798 · 26/06/2007 公開 · 16/06/2026 更新

要点

CVE-2007-2798 は kerberos 5 (mit) に影響する深刻度「緊急」 (CVSS 9.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：7.5%（全脆弱性の 94.5% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
kerberos 5 mit	`≤ 1.6.1`	修正版なし

概要

Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.

参考情報

patches.sgi.com/support/free/security/advisories/20070602-01-P.asc · Broken Link
docs.info.apple.com/article.html · Broken Link
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp · Broken Link
labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html · Mailing List
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html · Third Party Advisory
osvdb.org/36595 · Broken Link
secunia.com/advisories/25800 · Third Party Advisory
secunia.com/advisories/25801 · Third Party Advisory
secunia.com/advisories/25814 · Third Party Advisory
secunia.com/advisories/25821 · Third Party Advisory
secunia.com/advisories/25870 · Third Party Advisory
secunia.com/advisories/25875 · Third Party Advisory
secunia.com/advisories/25888 · Third Party Advisory
secunia.com/advisories/25890 · Third Party Advisory
secunia.com/advisories/25894 · Third Party Advisory
secunia.com/advisories/25911 · Third Party Advisory
secunia.com/advisories/26033 · Third Party Advisory
secunia.com/advisories/26228 · Third Party Advisory
secunia.com/advisories/26235 · Third Party Advisory
secunia.com/advisories/26909 · Third Party Advisory
secunia.com/advisories/27706 · Third Party Advisory
secunia.com/advisories/40346 · Third Party Advisory
security.gentoo.org/glsa/glsa-200707-11.xml · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-005.txt · Patch
debian.org/security/2007/dsa-1323 · Third Party Advisory
kb.cert.org/vuls/id/554257 · Patch
mandriva.com/security/advisories · Third Party Advisory
novell.com/linux/security/advisories/2007_38_krb5.html · Broken Link
redhat.com/support/errata/RHSA-2007-0384.html · Third Party Advisory
redhat.com/support/errata/RHSA-2007-0562.html · Third Party Advisory
securityfocus.com/archive/1/472289/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/472432/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/472507/30/5970/threaded · Third Party Advisory
securityfocus.com/bid/24653 · Third Party Advisory
securityfocus.com/bid/25159 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
trustix.org/errata/2007/0021 · Broken Link
ubuntu.com/usn/usn-477-1 · Third Party Advisory
us-cert.gov/cas/techalerts/TA07-177A.html · Third Party Advisory
vupen.com/english/advisories/2007/2337 · Third Party Advisory
vupen.com/english/advisories/2007/2370 · Third Party Advisory
vupen.com/english/advisories/2007/2491 · Third Party Advisory
vupen.com/english/advisories/2007/2732 · Third Party Advisory
vupen.com/english/advisories/2007/3229 · Third Party Advisory
vupen.com/english/advisories/2010/1574 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35080 · Third Party Advisory
issues.rpath.com/browse/RPL-1499 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1726 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7550 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9996 · Third Party Advisory
secure-support.novell.com/KanisaPlatform/Publishing/327/3675615_f.SAL_Public.html · Broken Link

kerberos 5 のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン