CVE-2007-1216 Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication metho...
HighCVSS 9.0
EPSS 9.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | < 1.6.1 | 1.6.1 |
| Canonical Ubuntu Linux | = 5.10 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| debian/krb5(Debian:12) | < 1.4.4-8 | 1.4.4-8 |
| debian/krb5(Debian:13) | < 1.4.4-8 | 1.4.4-8 |
| debian/krb5(Debian:14) | < 1.4.4-8 | 1.4.4-8 |
References
- docs.info.apple.com broken-link
- HPSBUX02217 broken-link vendor-advisory
- APPLE-SA-2007-04-19 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2007:025 broken-link vendor-advisory
- 24706 third-party-advisory
- 24735 third-party-advisory
- 24736 third-party-advisory
- 24740 third-party-advisory
- 24750 third-party-advisory
- 24757 third-party-advisory
- 24785 third-party-advisory
- 24786 third-party-advisory
- 24817 third-party-advisory
- 24966 third-party-advisory
- 25388 third-party-advisory
- GLSA-200704-02 third-party-advisory vendor-advisory
- web.mit.edu patch vendor-advisory
- DSA-1276 third-party-advisory vendor-advisory
- VU#419344 third-party-advisory us-government-resource
- MDKSA-2007:077 third-party-advisory vendor-advisory
- RHSA-2007:0095 third-party-advisory vendor-advisory
- 20070403 MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216] mailing-list third-party-advisory vdb-entry
- 20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation mailing-list third-party-advisory vdb-entry
- 20070405 FLEA-2007-0008-1: krb5 mailing-list third-party-advisory vdb-entry
- 23282 third-party-advisory vdb-entry
- 1017852 third-party-advisory vdb-entry
- USN-449-1 third-party-advisory vendor-advisory
- TA07-093B third-party-advisory us-government-resource
- TA07-109A third-party-advisory us-government-resource
- ADV-2007-1218 third-party-advisory vdb-entry
- ADV-2007-1470 third-party-advisory vdb-entry
- ADV-2007-1916 third-party-advisory vdb-entry
- kerberos-kadmind-code-execution(33413) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11135 broken-link signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2007-1216 vendor-advisory