CVE-2007-2442

Publication date 26 June 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
krb5 7.04 feisty
Fixed 1.4.4-5ubuntu3.3
6.10 edgy
Fixed 1.4.3-9ubuntu1.5
6.06 LTS dapper
Fixed 1.4.3-5ubuntu0.6

References

Related Ubuntu Security Notices (USN)

    • USN-477-1
    • krb5 vulnerabilities
    • 27 June 2007

Other references