{"id":"CVE-2007-0957","aliases":["DEBIAN-CVE-2007-0957","DSA-1276-1","EUVD-2007-0951","GHSA-qhvp-f78p-g96p","RHSA-2007:0095","openSUSE-SU-2024:10899-1"],"status":"published","title":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","severity":{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.10401,"percentile":0.95762,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2007-04-03T00:00:00Z","modified":"2026-10-21T17:47:50Z","fixes":[{"ecosystem":"Debian:12","package":"krb5","fixed_in":["1.4.4-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"krb5","fixed_in":["1.4.4-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"krb5","fixed_in":["1.4.4-8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-8"}]}]},{"source":"osv","ecosystem":"Debian:3.1","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-2sarge4"}]}],"versions":["1.3.6-2","1.3.6-2sarge1","1.3.6-2sarge2","1.3.6-2sarge3"],"bundled":3},{"source":"osv","ecosystem":"Debian:4.0","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-7etch1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-44"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-61"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.4-46"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"krb5-workstation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-23"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"krb5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2.2"}]}],"bundled":20}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mit","product":"kerberos_5"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","Third Party Advisory","advisory","web"]},{"url":"http://www.vupen.com/english/advisories/2007/1218","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-002-syslog.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.securityfocus.com/archive/1/464592/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc","tags":["vendor-advisory","x_refsource_SGI","x_transferred","Broken Link","advisory"]},{"url":"http://secunia.com/advisories/24966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24706","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24798","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24740","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0095.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1983","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24786","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Broken Link","web"]},{"url":"http://docs.info.apple.com/article.html?artnum=305391","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","web"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-093B.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://www.securityfocus.com/archive/1/464814/30/7170/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1276","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24735","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/23285","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-109A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://secunia.com/advisories/24750","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1250","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24817","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24757","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33411","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/704024","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"http://www.securitytracker.com/id?1017849","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"http://secunia.com/advisories/24785","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/25464","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:077","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/usn-449-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.vupen.com/english/advisories/2007/1470","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/24736","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/464666/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200704-02.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0957","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qhvp-f78p-g96p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-0957","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0095","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=229782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=231528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=231537","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0095.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-0956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-0957","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0957","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-1216","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-1216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1216","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-6144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37750","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2007-0957","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2007-04-06T01:00:00Z","modified":"2024-08-07T12:34:21.284Z","updated_at":"2026-11-02T13:34:03.879328Z"}],"euvd":[{"id":"EUVD-2007-0951","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2007-04-06T01:00:00Z","modified":"2024-08-07T12:34:21Z","updated_at":"2026-11-03T01:38:28.235221Z"}],"ghsa":[{"id":"GHSA-qhvp-f78p-g96p","title":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2022-05-03T03:18:01Z","modified":"2023-02-01T05:01:27Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:49:43.293288Z"}],"nvd":[{"id":"CVE-2007-0957","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2007-04-06T01:19:00Z","modified":"2026-06-16T22:36:38.227Z","cvss":[{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:01:14.732044Z"}],"osv":[{"id":"CVE-2007-0957","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2007-04-06T01:19:00Z","modified":"2026-04-10T03:38:00.58474Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-0957","description":"Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.","status":"published","published":"2007-04-06T01:19:00Z","modified":"2026-10-21T17:47:50.312837366Z","updated_at":"2026-11-02T15:45:23.105674Z"},{"id":"DSA-1276-1","title":"krb5 - several vulnerabilities","status":"published","published":"2007-04-03T00:00:00Z","modified":"2026-03-09T01:00:42.351658Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"openSUSE-SU-2024:10899-1","title":"krb5-1.19.2-2.2 on GA media","description":"These are all security issues fixed in the krb5-1.19.2-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:44.135635Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2007:0095","title":"Red Hat Security Advisory: krb5 security update","status":"published","published":"2024-09-15T16:36:16Z","modified":"2026-06-26T12:17:48.686339149Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}