Unrated severityNVD Advisory· Published Jun 26, 2007· Updated Jun 16, 2026
CVE-2007-2442
CVE-2007-2442
Description
The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*range: <=1.6.1
- (no CPE)range: <=1.6.1
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
52- web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txtnvdPatchVendor Advisory
- web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txtnvdPatchVendor Advisory
- www.kb.cert.org/vuls/id/356961nvdPatchThird Party AdvisoryUS Government Resource
- www.us-cert.gov/cas/techalerts/TA07-177A.htmlnvdBroken LinkPatchThird Party AdvisoryUS Government Resource
- lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlnvdMailing ListThird Party Advisory
- lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlnvdThird Party Advisory
- secunia.com/advisories/25800nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25801nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25814nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25821nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25841nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25870nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25888nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25890nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25894nvdBroken LinkThird Party Advisory
- secunia.com/advisories/25911nvdBroken LinkThird Party Advisory
- secunia.com/advisories/26033nvdBroken LinkThird Party Advisory
- secunia.com/advisories/26228nvdBroken LinkThird Party Advisory
- secunia.com/advisories/26235nvdBroken LinkThird Party Advisory
- secunia.com/advisories/26909nvdBroken LinkThird Party Advisory
- secunia.com/advisories/27706nvdBroken LinkThird Party Advisory
- secunia.com/advisories/40346nvdBroken LinkThird Party Advisory
- security.gentoo.org/glsa/glsa-200707-11.xmlnvdThird Party Advisory
- www.debian.org/security/2007/dsa-1323nvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2007-0384.htmlnvdBroken LinkThird Party Advisory
- www.redhat.com/support/errata/RHSA-2007-0562.htmlnvdBroken LinkThird Party Advisory
- www.securityfocus.com/archive/1/472288/100/0/threadednvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/472432/100/0/threadednvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/472507/30/5970/threadednvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/24655nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/25159nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/usn-477-1nvdThird Party Advisory
- www.vupen.com/english/advisories/2007/2337nvdBroken LinkThird Party Advisory
- www.vupen.com/english/advisories/2007/2354nvdBroken LinkThird Party Advisory
- www.vupen.com/english/advisories/2007/2491nvdBroken LinkThird Party Advisory
- www.vupen.com/english/advisories/2007/2732nvdBroken LinkThird Party Advisory
- www.vupen.com/english/advisories/2007/3229nvdBroken LinkThird Party Advisory
- www.vupen.com/english/advisories/2010/1574nvdBroken LinkThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/35082nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631nvdBroken LinkThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7344nvdBroken LinkThird Party Advisory
- patches.sgi.com/support/free/security/advisories/20070602-01-P.ascnvdBroken Link
- docs.info.apple.com/article.htmlnvdBroken Link
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvdBroken Link
- osvdb.org/36596nvdBroken Link
- sunsolve.sun.com/search/document.donvdBroken Link
- www.novell.com/linux/security/advisories/2007_38_krb5.htmlnvdBroken Link
- www.trustix.org/errata/2007/0021/nvdBroken Link
- issues.rpath.com/browse/RPL-1499nvdBroken Link
- secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.htmlnvdBroken Link
News mentions
0No linked articles in our index yet.