CVE-2007-0957: Buffer Overflow
Stack-based buffer overflow in the krb5klogsyslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0957?
CVE-2007-0957 is classified as a critical vulnerability due to its potential to allow remote authenticated users to execute arbitrary code.
How do I fix CVE-2007-0957?
To fix CVE-2007-0957, upgrade to MIT krb5 version 1.6.1 or later, or apply vendor patches for affected distributions.
Who is affected by CVE-2007-0957?
CVE-2007-0957 affects users of MIT Kerberos 5 versions prior to 1.6.1, as well as certain Debian and Ubuntu Linux versions.
What types of attacks can occur due to CVE-2007-0957?
Exploitation of CVE-2007-0957 can lead to execution of arbitrary code and unauthorized modifications to the Kerberos key database.
Are remote authenticated users able to exploit CVE-2007-0957?
Yes, remote authenticated users can exploit CVE-2007-0957 to execute arbitrary code on the vulnerable system.