CVE-2007-5972
- State
- Published
- Severity
- Not scored
- Published
- Dec 6, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 14, 2007
Description
Double free vulnerability in the krb5_def_store_mkey function in lib/kdb/kdb_default.c in MIT Kerberos 5 (krb5) 1.5 has unknown impact and remote authenticated attack vectors. NOTE: the free operations occur in code that stores the krb5kdc master key, and so the attacker must have privileges to store this key.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 39784third-party-advisory
- USN-940-1vendor-advisory
- SUSE-SR:2008:002vendor-advisory
- 26750vdb-entry
- 20071208 Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972]mailing-list
- ADV-2010-1192vdb-entry
- 44747vdb-entry
- 20071208 MIT Kerberos 5: Multiple vulnerabilitiesmailing-list
- 39290third-party-advisory
- USN-924-1vendor-advisory
- 28636third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=199211
- https://issues.rpath.com/browse/RPL-2012
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.