{"schemaVersion":3,"id":"CVE-2007-4000","aliases":["DEBIAN-CVE-2007-4000"],"status":"published","duplicateOf":null,"title":null,"description":"The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the \"modify policy\" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.","dates":{"published":"2007-09-05T10:00:00.000Z","modified":"2024-08-07T14:37:05.906Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":8.5,"severity":"high","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.06139,"percentile":0.93374,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.06139},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06139,"percentile":0.93374}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06139,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06139,"percentile":0.93374}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-824","name":"Access of Uninitialized Pointer","description":"The product accesses or uses a pointer that has not been initialized.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/824.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.6.dfsg.1-7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.dfsg.1-7","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7","noFixRecorded":false,"fixedIn":null}],"versionsText":"7","eol":{"isEol":true,"eolDate":"2008-06-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"7","label":"7 (Moonshine)","eolFrom":"2008-06-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5, ≤ 1.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5, ≤ 1.6.2","eol":null,"hubHref":"/vendor/mit/kerberos_5"}],"affectedCount":3,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml","label":"www.gentoo.org/security/en/glsa/glsa-200709-01.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html","label":"www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","Mailing List"]},{"url":"http://www.novell.com/linux/security/advisories/2007_19_sr.html","label":"www.novell.com/linux/security/advisories/2007_19_sr.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"https://issues.rpath.com/browse/RPL-1696","label":"issues.rpath.com/browse/RPL-1696","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/26680","label":"secunia.com/advisories/26680","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/26783","label":"secunia.com/advisories/26783","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.securitytracker.com/id?1018647","label":"www.securitytracker.com/id?1018647","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3051","label":"www.vupen.com/english/advisories/2007/3051","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://secunia.com/advisories/26728","label":"secunia.com/advisories/26728","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/26700","label":"secunia.com/advisories/26700","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.securityfocus.com/bid/25533","label":"www.securityfocus.com/bid/25533","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/478794/100/0/threaded","label":"www.securityfocus.com/archive/1/478794/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=250976","label":"bugzilla.redhat.com/show_bug.cgi?id=250976","hostname":"bugzilla.redhat.com","tags":["X Refsource MISC","Issue Tracking"]},{"url":"http://secunia.com/advisories/26987","label":"secunia.com/advisories/26987","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://secunia.com/advisories/26676","label":"secunia.com/advisories/26676","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36438","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36438","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9278","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0858.html","label":"www.redhat.com/support/errata/RHSA-2007-0858.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/377544","label":"www.kb.cert.org/vuls/id/377544","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt","label":"web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3092","label":"securityreason.com/securityalert/3092","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON","Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:174","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:174","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Broken Link"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-4000","label":"security-tracker.debian.org/tracker/CVE-2007-4000","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10899-1","RHSA-2007:0858"],"duplicates":[],"related":["OPENSUSE-SU-2024:10899-1"]},"timeline":[{"kind":"published","date":"2007-09-05T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T14:37:05.906Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:00:21.210Z","stale":false,"partial":false}}