CVE-2007-1216

HIGH Year: 2007
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-415
View all →

Vulnerability Description

Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".

Related Vulnerabilities

CVE-2018-0101

CRITICAL
CVSS:10.0(Critical)

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the aff...

CWE-4152018

CVE-2002-0059

CRITICAL
CVSS:9.8(Critical)

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow l...

CWE-4152002

CVE-2003-0545

CRITICAL
CVSS:9.8(Critical)

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 e...

CWE-4152003

CVE-2004-0772

CRITICAL
CVSS:9.8(Critical)

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.

CWE-4152004

CVE-2005-1689

CRITICAL
CVSS:9.8(Critical)

Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

CWE-4152005

CVE-2007-4773

CRITICAL
CVSS:9.8(Critical)

Systrace before 1.6.0 has insufficient escape policy enforcement.

CWE-4152007