National Cyber-Alert System

Vulnerability Summary for CVE-2007-5894

Overview

** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating " The 'length' variable is only uninitialized if 'auth_type' is neither the 'KERBEROS_V4' nor 'GSSAPI'; this condition cannot occur in the unmodified source code."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (12/14/2007)

This issue is not a vulnerability, for more information see http://marc.info/?m=119743235325151

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2012

Hyperlink:https://issues.rpath.com/browse/RPL-2012

External Source: BID

Name: 26750

Hyperlink:http://www.securityfocus.com/bid/26750

External Source: BUGTRAQ

Name: 20080319 rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/489883/100/0/threaded

External Source: SUSE

Name: SUSE-SR:2008:002

Hyperlink:http://www.novell.com/linux/security/advisories/suse_security_summary_report.html

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2008-0112

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2008-0112

External Source: SECUNIA

Name: 29457

Type: Advisory

Hyperlink:http://secunia.com/advisories/29457

External Source: SECUNIA

Name: 28636

Type: Advisory

Hyperlink:http://secunia.com/advisories/28636

External Source: FULLDISC

Name: 20071208 Venustech reports of MIT krb5 vulns [CVE-2007-5894 CVE-2007-5901 CVE-2007-5902 CVE-2007-5971 CVE-2007-5972]

Hyperlink:http://seclists.org/fulldisclosure/2007/Dec/0321.html

External Source: FULLDISC

Name: 20071208 MIT Kerberos 5: Multiple vulnerabilities

Hyperlink:http://seclists.org/fulldisclosure/2007/Dec/0176.html

External Source: OSVDB

Name: 44333

Hyperlink:http://osvdb.org/44333

External Source: MISC

Name: http://bugs.gentoo.org/show_bug.cgi?id=199205

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=199205