CVE-2007-5471: High severity SUSE SuSE Linux vulnerability
libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. NOTE: this issue probably affects other daemons that attempt to initialize this library within a chroot configuration or other invalid configuration.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5471?
CVE-2007-5471 is classified as a denial of service vulnerability.
How do I fix CVE-2007-5471?
To fix CVE-2007-5471, you should upgrade to a version of libgssapi that is 0.6-13.7 or later.
What are the affected systems for CVE-2007-5471?
CVE-2007-5471 primarily affects SUSE Linux Enterprise Server 10 SP1 with the ISC BIND named daemon.
What type of attack is associated with CVE-2007-5471?
CVE-2007-5471 is exploited through a GSS-TSIG request which triggers an initialization error leading to a daemon exit.
Is CVE-2007-5471 a local or remote vulnerability?
CVE-2007-5471 is considered a remote vulnerability as it allows attackers to disrupt operations from a distance.