CVE-2007-0957
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
CVE-2007-0957- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
CVE-2007-0957- Updated
- 2026-11-02
EUVDEUVD-2007-0951 No score
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
EUVD-2007-0951- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhvp-f78p-g96p No score
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
GHSA-qhvp-f78p-g96p- Weakness
- CWE-787
- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
CVE-2007-0957- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0957 No score
Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
- Record
DEBIAN-CVE-2007-0957- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:13 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:14 |
before 1.4.4-8 | 1.4.4-8 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge4, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge3 |
1.3.6-2sarge4 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch1 | 1.4.4-7etch1 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-44 | 0:1.2.2-44 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-61 | 0:1.2.7-61 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-46 | 0:1.3.4-46 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-23 | 0:1.5-23 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0957 is a high vulnerability (CVSS 9.0) in Canonical Ubuntu Linux, published April 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. Fixed in krb5 1.4.4-8.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757
vupen.com/english/advisories/2007/1218
web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt
securityfocus.com/archive/1/464592/100/0/threaded
secunia.com/advisories/24966
Show 67 moreShow less
redhat.com/support/errata/RHSA-2007-0095.html
sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1
docs.info.apple.com/article.html?artnum=305391
us-cert.gov/cas/techalerts/TA07-093B.html
debian.org/security/2007/dsa-1276
exchange.xforce.ibmcloud.com/vulnerabilities/33411
kb.cert.org/vuls/id/704024
securitytracker.com/id?1017849
lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html
mandriva.com/security/advisories?name=MDKSA-2007:077
ubuntu.com/usn/usn-449-1
lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html
security.gentoo.org/glsa/glsa-200704-02.xml
nvd.nist.gov/vuln/detail/CVE-2007-0957
github.com/advisories/GHSA-qhvp-f78p-g96p
security-tracker.debian.org/tracker/CVE-2007-0957
access.redhat.com/errata/RHSA-2007:0095
bugzilla.redhat.com/show_bug.cgi?id=229782
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0095.json
cve.org/CVERecord?id=CVE-2007-0956
suse.com/security/cve/CVE-2006-6143