CVE-2007-5972: Buffer Overflow

Published Dec 6, 2007

Updated

Double free vulnerability in the krb5defstoremkey function in lib/kdb/kdbdefault.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.

Affected Software

1 affected component

MIT Kerberos 5=1.5

Event History

Dec 6, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5972?

The severity of CVE-2007-5972 is currently unknown as it pertains to a double free vulnerability with unspecified impact.

How do I fix CVE-2007-5972?

To fix CVE-2007-5972, it is recommended to upgrade to a later version of MIT Kerberos 5 beyond version 1.5.

What is the vulnerability type of CVE-2007-5972?

CVE-2007-5972 is classified as a double free vulnerability affecting the storage of the krb5kdc master key.

Who is affected by CVE-2007-5972?

CVE-2007-5972 affects users of MIT Kerberos 5 version 1.5.

Can an attacker exploit CVE-2007-5972 remotely?

Yes, an attacker must authenticate to exploit CVE-2007-5972, indicating that remote authenticated attack vectors are possible.