VULNERABILITY INTELLIGENCE
CVE-2007-2798
CVSS score9 HIGH
EPSS probability7.52%
CISA KEVNot currently listed
Published2007-06-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory