CVE-2007-2798 in Kerberos

Summary

Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 05/22/2007
• Disclosure: 06/26/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-37476
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 9.0
• EPSS: 0.34892
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2798
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2798
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2798/