CVE-2007-2798
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...
9.0 HighFix available
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
Exploit likelihood
7.52%Down 1.6 points since Feb 4, 2022
What each source reports
NVD Score used
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
CVE-2007-2798- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
CVE-2007-2798- Updated
- 2026-11-02
EUVDEUVD-2007-2790 No score
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
EUVD-2007-2790- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hfq9-977x-jj82 No score
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1...
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
GHSA-hfq9-977x-jj82- Weakness
- CWE-787
- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
CVE-2007-2798- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2798 No score
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
- Record
DEBIAN-CVE-2007-2798- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10899-1 No score
krb5-1.19.2-2.2 on GA media
These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10899-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
krb5Debian:12 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:13 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:14 |
before 1.6.dfsg.1-5 | 1.6.dfsg.1-5 |
krb5Debian:3.1 From an advisory covering 3 CVEs |
before 1.3.6-2sarge5, plus listed versions 1.3.6-21.3.6-2sarge11.3.6-2sarge21.3.6-2sarge31.3.6-2sarge4 |
1.3.6-2sarge5 |
krb5Debian:4.0 From an advisory covering 3 CVEs |
before 1.4.4-7etch2, plus listed versions 1.4.4-7etch1 |
1.4.4-7etch2 |
krb5Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
krb5Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-libsRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-serverRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5-workstationRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:1.2.2-47 | 0:1.2.2-47 |
krb5Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-serverRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5-workstationRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:1.2.7-66 | 0:1.2.7-66 |
krb5Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5-workstationRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:1.3.4-49 | 0:1.3.4-49 |
krb5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-serverRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5-workstationRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:1.5-26 | 0:1.5-26 |
krb5openSUSE:Tumbleweed From an advisory covering 20 CVEs |
before 1.19.2-2.2 | 1.19.2-2.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2798 is a high vulnerability (CVSS 9.0) in Canonical Ubuntu Linux, published June 26, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.52%, the 94th percentile. Fixed in krb5 1.6.dfsg.1-5.
References
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
vupen.com/english/advisories/2007/2732
secunia.com/advisories/25894
ubuntu.com/usn/usn-477-1
Show 86 moreShow less
securityfocus.com/archive/1/472507/30/5970/threaded
redhat.com/support/errata/RHSA-2007-0384.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1726
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
security.gentoo.org/glsa/glsa-200707-11.xml
web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-005.txt
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
debian.org/security/2007/dsa-1323
trustix.org/errata/2007/0021
us-cert.gov/cas/techalerts/TA07-177A.html
novell.com/linux/security/advisories/2007_38_krb5.html
sunsolve.sun.com/search/document.do?assetkey=1-26-102985-1
mandriva.com/security/advisories?name=MDKSA-2007:137
issues.rpath.com/browse/RPL-1499
exchange.xforce.ibmcloud.com/vulnerabilities/35080
docs.info.apple.com/article.html?artnum=306172
kb.cert.org/vuls/id/554257
securitytracker.com/id?1018295
osvdb.org/36595
secure-support.novell.com/KanisaPlatform/Publishing/327/3675615_f.SAL_Public.html
labs.idefense.com/intelligence/vulnerabilities/display.php?id=548
nvd.nist.gov/vuln/detail/CVE-2007-2798
github.com/advisories/GHSA-hfq9-977x-jj82
security-tracker.debian.org/tracker/CVE-2007-2798
access.redhat.com/errata/RHSA-2007:0384
bugzilla.redhat.com/show_bug.cgi?id=241590
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0384.json
cve.org/CVERecord?id=CVE-2007-2442
suse.com/security/cve/CVE-2006-6143