Логотип exploitDog
bind:"GHSA-rjp4-vqhr-2249" OR bind:"CVE-2007-4000"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-rjp4-vqhr-2249" OR bind:"CVE-2007-4000"

Количество 7

Количество 7

github логотип

GHSA-rjp4-vqhr-2249

около 3 лет назад

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

EPSS: Средний
ubuntu логотип

CVE-2007-4000

почти 18 лет назад

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

CVSS2: 8.5
EPSS: Средний
redhat логотип

CVE-2007-4000

почти 18 лет назад

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

EPSS: Средний
nvd логотип

CVE-2007-4000

почти 18 лет назад

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

CVSS2: 8.5
EPSS: Средний
debian логотип

CVE-2007-4000

почти 18 лет назад

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy. ...

CVSS2: 8.5
EPSS: Средний
oracle-oval логотип

ELSA-2007-0858

почти 18 лет назад

ELSA-2007-0858: Important: krb5 security update (IMPORTANT)

EPSS: Низкий
fstec логотип

BDU:2015-09590

почти 18 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

CVSS2: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-rjp4-vqhr-2249

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

10%
Средний
около 3 лет назад
ubuntu логотип
CVE-2007-4000

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

CVSS2: 8.5
10%
Средний
почти 18 лет назад
redhat логотип
CVE-2007-4000

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

10%
Средний
почти 18 лет назад
nvd логотип
CVE-2007-4000

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (krb5) 1.5 through 1.6.2 does not properly check return values when the policy does not exist, which might allow remote authenticated users with the "modify policy" privilege to execute arbitrary code via unspecified vectors that trigger a write to an uninitialized pointer.

CVSS2: 8.5
10%
Средний
почти 18 лет назад
debian логотип
CVE-2007-4000

The kadm5_modify_policy_internal function in lib/kadm5/srv/svr_policy. ...

CVSS2: 8.5
10%
Средний
почти 18 лет назад
oracle-oval логотип
ELSA-2007-0858

ELSA-2007-0858: Important: krb5 security update (IMPORTANT)

почти 18 лет назад
fstec логотип
BDU:2015-09590

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

CVSS2: 10
почти 18 лет назад

Уязвимостей на страницу