CVE-2007-5894

描述

The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating " The 'length' variable is only uninitialized if 'auth_type' is neither the 'KERBEROS_V4' nor 'GSSAPI'; this condition cannot occur in the unmodified source code.

如何修補 CVE-2007-5894

要修補 CVE-2007-5894,請將受影響套件升級到下列已修補版本。

• Debian/krb5—升級至 1.6.dfsg.4~beta1-1 或更新版本

CVE-2007-5894 正在被利用嗎?

低 — EPSS 為 2.7%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 1.6.dfsg.4~beta1-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2007-5894