Descripciones CVE

The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a zero-length RPC credential, which causes kadmind to free an uninitialized pointer during cleanup.

Informaciones CVE

Debilidades relacionadas

CWE-ID	Nombre de la debilidad	Fuente
CWE-824	Access of Uninitialized Pointer The product accesses or uses a pointer that has not been initialized.

Métricas

Métricas	Puntuación	Gravedad	CVSS Vector	Fuente
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS es un modelo de puntuación que predice la probabilidad de que una vulnerabilidad sea explotada.

Puntuación EPSS

El modelo EPSS produce una puntuación de probabilidad entre 0 y 1 (0 y 100%). Cuanto mayor sea la puntuación, mayor será la probabilidad de que se explote una vulnerabilidad.

Percentil EPSS

El percentil se usa para clasificar las CVE según su puntuación EPSS. Por ejemplo, una CVE en el percentil 95 según su puntuación EPSS tiene más probabilidades de ser explotada que el 95% de otras CVE. Así, el percentil sirve para comparar la puntuación EPSS de una CVE con la de otras CVE.

EPSS First.org

Productos mencionados

Configuración 0

Mit>>Kerberos_5 >> Version Hasta (incluido) 1.6.1

Configuración 0

Debian>>Debian_linux >> Version 3.1

Debian>>Debian_linux >> Version 4.0

Configuración 0

Canonical>>Ubuntu_linux >> Version 6.06

Canonical>>Ubuntu_linux >> Version 6.10

Canonical>>Ubuntu_linux >> Version 7.04

Referencias

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
Tags : mailing-list, x_refsource_FULLDISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/35082
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2007/2732
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/25894
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/25801
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-477-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://www.kb.cert.org/vuls/id/356961
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.vupen.com/english/advisories/2007/3229
Tags : vdb-entry, x_refsource_VUPEN

http://www.securityfocus.com/archive/1/472507/30/5970/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/25911
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/25888
Tags : third-party-advisory, x_refsource_SECUNIA

http://osvdb.org/36596
Tags : vdb-entry, x_refsource_OSVDB

http://www.redhat.com/support/errata/RHSA-2007-0384.html
Tags : vendor-advisory, x_refsource_REDHAT

https://secure-support.novell.com/KanisaPlatform/Publishing/773/3248163_f.SAL_Public.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/25890
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/2337
Tags : vdb-entry, x_refsource_VUPEN

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.vupen.com/english/advisories/2007/2491
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/26228
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2010/1574
Tags : vdb-entry, x_refsource_VUPEN

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7344
Tags : vdb-entry, signature, x_refsource_OVAL

http://secunia.com/advisories/26033
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.gentoo.org/glsa/glsa-200707-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/25800
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
Tags : vendor-advisory, x_refsource_HP

http://www.securitytracker.com/id?1018293
Tags : vdb-entry, x_refsource_SECTRACK

http://www.debian.org/security/2007/dsa-1323
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.trustix.org/errata/2007/0021/
Tags : vendor-advisory, x_refsource_TRUSTIX

http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt
Tags : x_refsource_CONFIRM

http://www.us-cert.gov/cas/techalerts/TA07-177A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.novell.com/linux/security/advisories/2007_38_krb5.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/25870
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDKSA-2007:137
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/26909
Tags : third-party-advisory, x_refsource_SECUNIA

https://issues.rpath.com/browse/RPL-1499
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/27706
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=306172
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2007/2354
Tags : vdb-entry, x_refsource_VUPEN

http://www.redhat.com/support/errata/RHSA-2007-0562.html
Tags : vendor-advisory, x_refsource_REDHAT

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427
Tags : vendor-advisory, x_refsource_HP

http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt
Tags : x_refsource_CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102914-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.securityfocus.com/archive/1/472432/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securityfocus.com/bid/25159
Tags : vdb-entry, x_refsource_BID

http://www.securityfocus.com/archive/1/472288/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/25814
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/25821
Tags : third-party-advisory, x_refsource_SECUNIA

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
Tags : vendor-advisory, x_refsource_SGI

http://secunia.com/advisories/40346
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/25841
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/26235
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/24655
Tags : vdb-entry, x_refsource_BID

Fecha	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	12.25%	–	–
2022-03-20	–	–	12.25%	–	–
2022-04-03	–	–	12.25%	–	–
2023-03-12	–	–	–	97.07%	–
2023-12-03	–	–	–	96.96%	–
2024-02-11	–	–	–	96.76%	–
2024-03-24	–	–	–	96.49%	–
2024-06-02	–	–	–	96.49%	–
2024-06-08	–	–	–	96.6%	–
2024-12-22	–	–	–	96.35%	–
2025-01-19	–	–	–	96.35%	–
2025-03-18	–	–	–	–	31.93%
2025-03-30	–	–	–	–	39.32%
2025-11-09	–	–	–	–	41.7%
2026-02-22	–	–	–	–	42.57%
2026-05-17	–	–	–	–	42.57%
2026-06-14	–	–	–	–	38.12%

Fecha	Percentil
2022-02-06	89%
2022-03-20	9%
2022-04-03	95%
2023-03-12	1%
2023-12-03	1%
2024-02-11	1%
2024-03-24	1%
2024-06-02	1%
2024-06-08	1%
2024-12-22	1%
2025-01-19	1%
2025-03-18	96%
2025-03-30	97%
2025-11-09	97%
2026-02-22	97%
2026-05-17	98%
2026-06-14	97%

CVE-2007-2442 : Detalle

CVE-2007-2442

Descripciones CVE

Informaciones CVE

Debilidades relacionadas

Métricas

EPSS

Puntuación EPSS

Percentil EPSS

Productos mencionados

Configuración 0

Configuración 0

Configuración 0

Referencias