CVEvulnerability

CVE-2007-4000

8.5 HIGH Published 2007-09-05 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-09-05
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
Weaknesses: CWE-824

Description

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

Affected configurations

• mit kerberos 5 (>= 1.5 <= 1.6.2) • fedoraproject fedora 7

Related

Weakness · CWE (1)

CWE-824 Access of Uninitialized Pointer weakness

Referenced by CWE · observed example (1)

CWE-824 Access of Uninitialized Pointer weakness

References

http://secunia.com/advisories/26676 Broken Link
http://secunia.com/advisories/26680 Broken Link
http://secunia.com/advisories/26700 Broken Link
http://secunia.com/advisories/26728 Broken Link
http://secunia.com/advisories/26783 Broken Link
http://secunia.com/advisories/26987 Broken Link
http://securityreason.com/securityalert/3092 Broken Link
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml Third Party Advisory
http://www.kb.cert.org/vuls/id/377544 Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:174 Broken Link
http://www.novell.com/linux/security/advisories/2007_19_sr.html Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0858.html Third Party Advisory
http://www.securityfocus.com/archive/1/478794/100/0/threaded Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25533 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018647 Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3051 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=250976 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/36438 Broken Link, VDB Entry
https://issues.rpath.com/browse/RPL-1696 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278 Broken Link
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html Mailing List
http://secunia.com/advisories/26676 Broken Link
http://secunia.com/advisories/26680 Broken Link
http://secunia.com/advisories/26700 Broken Link
http://secunia.com/advisories/26728 Broken Link
http://secunia.com/advisories/26783 Broken Link
http://secunia.com/advisories/26987 Broken Link
http://securityreason.com/securityalert/3092 Broken Link
http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml Third Party Advisory
http://www.kb.cert.org/vuls/id/377544 Third Party Advisory, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:174 Broken Link
http://www.novell.com/linux/security/advisories/2007_19_sr.html Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0858.html Third Party Advisory
http://www.securityfocus.com/archive/1/478794/100/0/threaded Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25533 Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018647 Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3051 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=250976 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/36438 Broken Link, VDB Entry
https://issues.rpath.com/browse/RPL-1696 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278 Broken Link
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html Mailing List