CVE-2007-0957: canonical ubuntu_linux Out-of-bounds Write
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2007-0957 is a high (CVSS 9.0) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 10.33% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3 · Related 1Timeline
- 06-04-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
10.33%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.33% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- krb5< 1.4.4-8
- debian_linuxEOL3.1 | 4.0
Canonical1 product
- ubuntu_linuxEOL5.10 | 6.06 | 6.10
Mit1 product
- kerberos_5< 1.6.1
3 vendors · 4 products
References
37 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757VDB EntrySignatureX Refsource OVALBroken LinkThird Party Advisory
- web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txtX Refsource CONFIRMPatchVendor Advisory
- www.securityfocus.com/archive/1/464592/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- www.redhat.com/support/errata/RHSA-2007-0095.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
Show all 37 references
- sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1Vendor AdvisoryX Refsource SUNALERTBroken Link
- www.us-cert.gov/cas/techalerts/TA07-093B.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- www.securityfocus.com/archive/1/464814/30/7170/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- www.us-cert.gov/cas/techalerts/TA07-109A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- lists.suse.com/archive/suse-security-announce/2007-Apr/0001.htmlVendor AdvisoryX Refsource SUSEBroken Link
- www.mandriva.com/security/advisories?name=MDKSA-2007:077Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.apple.com/archives/Security-announce/2007/Apr/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- www.securityfocus.com/archive/1/464666/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry