CVE-2007-5901: Use After Free
Published Dec 6, 2007
·Updated
Use-after-free vulnerability in the gssindicatemechs function in lib/gssapi/mechglue/ginitialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result of a typo in the source code.
Affected Software
5 affected components
Apple iOS and macOS=10.4.11
Apple iOS and macOS=10.5.2
Apple Mac OS X Server=10.4.11
Apple Mac OS X Server=10.5.2
mit Kerberos 5<=1.6.3_kdc
Remediation
Patch Available
Event History
Dec 6, 2007
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
02:46 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-5901?
The severity of CVE-2007-5901 is currently unknown due to the lack of detailed information on its impact and attack vectors.
2
What software is affected by CVE-2007-5901?
CVE-2007-5901 affects MIT Kerberos 5 versions up to and including 1.6.3_kdc.
3
How can CVE-2007-5901 be mitigated?
To mitigate CVE-2007-5901, update to a version of MIT Kerberos 5 that is later than 1.6.3_kdc.
4
Is there a patch available for CVE-2007-5901?
Yes, patches for CVE-2007-5901 are available in later versions of MIT Kerberos 5.
5
What is the nature of CVE-2007-5901?
CVE-2007-5901 is a use-after-free vulnerability found in the gss_indicate_mechs function.