Search for vulnerabilities
Vulnerability details: VCID-ev2p-hk9g-aaah
Vulnerability ID VCID-ev2p-hk9g-aaah
Aliases CVE-2007-2798
Summary Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
Status Published
Exploitability 2.0
Weighted Severity 9.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-787 Out-of-bounds Write
System Score Found at
generic_textual MODERATE http://docs.info.apple.com/article.html?artnum=306172
generic_textual MODERATE http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
rhas Critical https://access.redhat.com/errata/RHSA-2007:0384
rhas Important https://access.redhat.com/errata/RHSA-2007:0562
epss 0.1489 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.1489 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.1489 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.1489 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.1489 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.22687 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.2685 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.94295 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.96164 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.96164 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.96164 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
epss 0.96164 https://api.first.org/data/v1/epss?cve=CVE-2007-2798
rhbs high https://bugzilla.redhat.com/show_bug.cgi?id=245549
cvssv2 9.0 https://nvd.nist.gov/vuln/detail/CVE-2007-2798
generic_textual MODERATE http://www.securityfocus.com/bid/25159
Reference id Reference type URL
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://docs.info.apple.com/article.html?artnum=306172
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=548
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://osvdb.org/36595
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2798.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2798
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2798
http://secunia.com/advisories/25800
http://secunia.com/advisories/25801
http://secunia.com/advisories/25814
http://secunia.com/advisories/25821
http://secunia.com/advisories/25870
http://secunia.com/advisories/25875
http://secunia.com/advisories/25888
http://secunia.com/advisories/25890
http://secunia.com/advisories/25894
http://secunia.com/advisories/25911
http://secunia.com/advisories/26033
http://secunia.com/advisories/26228
http://secunia.com/advisories/26235
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://secunia.com/advisories/40346
http://security.gentoo.org/glsa/glsa-200707-11.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/35080
https://issues.rpath.com/browse/RPL-1499
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1726
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7550
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9996
https://secure-support.novell.com/KanisaPlatform/Publishing/327/3675615_f.SAL_Public.html
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102985-1
http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-005.txt
http://www.debian.org/security/2007/dsa-1323
http://www.kb.cert.org/vuls/id/554257
http://www.mandriva.com/security/advisories?name=MDKSA-2007:137
http://www.novell.com/linux/security/advisories/2007_38_krb5.html
http://www.redhat.com/support/errata/RHSA-2007-0384.html
http://www.redhat.com/support/errata/RHSA-2007-0562.html
http://www.securityfocus.com/archive/1/472289/100/0/threaded
http://www.securityfocus.com/archive/1/472432/100/0/threaded
http://www.securityfocus.com/archive/1/472507/30/5970/threaded
http://www.securityfocus.com/bid/24653
http://www.securityfocus.com/bid/25159
http://www.securitytracker.com/id?1018295
http://www.trustix.org/errata/2007/0021/
http://www.ubuntu.com/usn/usn-477-1
http://www.us-cert.gov/cas/techalerts/TA07-177A.html
http://www.vupen.com/english/advisories/2007/2337
http://www.vupen.com/english/advisories/2007/2370
http://www.vupen.com/english/advisories/2007/2491
http://www.vupen.com/english/advisories/2007/2732
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2010/1574
245549 https://bugzilla.redhat.com/show_bug.cgi?id=245549
430785 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430785
cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
CVE-2007-2798 https://nvd.nist.gov/vuln/detail/CVE-2007-2798
GLSA-200707-11 https://security.gentoo.org/glsa/200707-11
RHSA-2007:0384 https://access.redhat.com/errata/RHSA-2007:0384
RHSA-2007:0562 https://access.redhat.com/errata/RHSA-2007:0562
USN-477-1 https://usn.ubuntu.com/477-1/
No exploits are available.
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-2798
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.94174
EPSS Score 0.1489
Published At June 11, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.