CVE-2007-4000: High severity MIT Kerberos 5 vulnerability
MIT notified us of a kadmind uninitialized pointer. Will be public on 04 September 2007, at 14:00 US/Eastern time.
This issue has not been triaged as it may well affect recent RHEL distributions with a different severity (flaw type is likely caught by fortifysource)
Other sources
The kadm5modifypolicyinternal function in lib/kadm5/srv/svrpolicy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4000?
CVE-2007-4000 has not been explicitly triaged but may affect recent RHEL distributions with varying severity due to its nature.
How do I fix CVE-2007-4000?
To fix CVE-2007-4000, users should apply the latest updates for MIT Kerberos 5 or consult their distribution's advisories.
What software versions are affected by CVE-2007-4000?
CVE-2007-4000 affects multiple versions of MIT Kerberos 5, including 1.5 through 1.6.2 and Fedora 7.
Is CVE-2007-4000 remote exploitability possible?
The nature of CVE-2007-4000 suggests that it could be potentially exploited remotely, depending on configuration.
Who discovered CVE-2007-4000?
CVE-2007-4000 was reported by security researchers at MIT.