Unscored severity · published Apr 6, 2007
CVE-2007-0957
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in…
–
CVSS
10.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
3.1; 4.0 · source: NVD
K5
Kerberos 5 · Mit
before 1.6.1 · source: NVD
UL
Ubuntu Linux · Canonical
5.10; 6.06; 6.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0957
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0957
Broken Link
http://docs.info.apple.com/article.html?artnum=305391
Mailing List
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
Broken Link
http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
Third Party Advisory
http://secunia.com/advisories/24706
Third Party Advisory
http://secunia.com/advisories/24735
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation