{"schemaVersion":3,"id":"CVE-2007-0957","aliases":["DEBIAN-CVE-2007-0957"],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","dates":{"published":"2007-04-06T01:00:00.000Z","modified":"2024-08-07T12:34:21.284Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9,"severity":"high","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.10327,"percentile":0.95666,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.10327},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10327,"percentile":0.95666}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10327,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10327,"percentile":0.95666}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.10","noFixRecorded":false,"fixedIn":null},{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"6.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.10 | 6.06 | 6.10","eol":{"isEol":true,"eolDate":"2007-04-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5.10","label":"5.10 'Breezy Badger'","eolFrom":"2007-04-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"5.10"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.4.4-8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.4-8","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.1","noFixRecorded":false,"fixedIn":null},{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.1 | 4.0","eol":{"isEol":true,"eolDate":"2008-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"3.1","label":"3.1 (Sarge)","eolFrom":"2008-03-31T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"3.1r8"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":4,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1218","label":"www.vupen.com/english/advisories/2007/1218","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt","label":"web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/464592/100/0/threaded","label":"www.securityfocus.com/archive/1/464592/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/24966","label":"secunia.com/advisories/24966","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/24706","label":"secunia.com/advisories/24706","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/24798","label":"secunia.com/advisories/24798","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/24740","label":"secunia.com/advisories/24740","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0095.html","label":"www.redhat.com/support/errata/RHSA-2007-0095.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1983","label":"www.vupen.com/english/advisories/2007/1983","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24786","label":"secunia.com/advisories/24786","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT","Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=305391","label":"docs.info.apple.com/article.html?artnum=305391","hostname":"docs.info.apple.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-093B.html","label":"www.us-cert.gov/cas/techalerts/TA07-093B.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/464814/30/7170/threaded","label":"www.securityfocus.com/archive/1/464814/30/7170/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2007/dsa-1276","label":"www.debian.org/security/2007/dsa-1276","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24735","label":"secunia.com/advisories/24735","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/bid/23285","label":"www.securityfocus.com/bid/23285","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-109A.html","label":"www.us-cert.gov/cas/techalerts/TA07-109A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://secunia.com/advisories/24750","label":"secunia.com/advisories/24750","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2007/1250","label":"www.vupen.com/english/advisories/2007/1250","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24817","label":"secunia.com/advisories/24817","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/24757","label":"secunia.com/advisories/24757","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33411","label":"exchange.xforce.ibmcloud.com/vulnerabilities/33411","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/704024","label":"www.kb.cert.org/vuls/id/704024","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://www.securitytracker.com/id?1017849","label":"www.securitytracker.com/id?1017849","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html","label":"lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html","hostname":"lists.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://secunia.com/advisories/24785","label":"secunia.com/advisories/24785","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/25464","label":"secunia.com/advisories/25464","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:077","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:077","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-449-1","label":"www.ubuntu.com/usn/usn-449-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","label":"lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1470","label":"www.vupen.com/english/advisories/2007/1470","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Third Party Advisory"]},{"url":"http://secunia.com/advisories/24736","label":"secunia.com/advisories/24736","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/464666/100/0/threaded","label":"www.securityfocus.com/archive/1/464666/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"http://security.gentoo.org/glsa/glsa-200704-02.xml","label":"security.gentoo.org/glsa/glsa-200704-02.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-0957","label":"security-tracker.debian.org/tracker/CVE-2007-0957","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1276-1","OPENSUSE-SU-2024:10899-1","RHSA-2007:0095"],"duplicates":[],"related":["OPENSUSE-SU-2024:10899-1"]},"timeline":[{"kind":"published","date":"2007-04-06T01:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T12:34:21.284Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:47:09.065Z","stale":false,"partial":false}}