Lucene search
Ubuntu.comUB:CVE-2007-5939HistoryDec 06, 2007 - 12:00 a.m.
CVE-2007-5939
2007-12-0600:00:00
ubuntu.com
ubuntu.com
9
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.02 Low
EPSS
Percentile
88.9%
The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does
not allocate memory for the ticketfile pointer before calling free, which
allows remote attackers to have an unknown impact via an invalid username.
NOTE: the vulnerability was originally reported for ftpd.c, but this is
incorrect.
Bugs
Related
nvd
nvd
CVE-2007-5939
2007-12-06 15:46:00
openvas
openvas
SLES9: Security update for heimdal
2009-10-10 00:00:00
SLES9: Security update for heimdal
2009-10-10 00:00:00
securityvulns
securityvulns
Heimdal RADIUS server memory corruption
2007-12-09 00:00:00
[ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability
2007-12-09 00:00:00
nessus
nessus
SuSE9 Security Update : heimdal (YOU Patch Number 12015)
2009-09-24 00:00:00
cvelist
cvelist
CVE-2007-5939
2007-12-06 15:00:00
debiancve
debiancve
CVE-2007-5939
2007-12-06 15:46:00
prion
prion
Design/Logic Flaw
2007-12-06 15:46:00
cve
cve
CVE-2007-5939
2007-12-06 15:46:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.02 Low
EPSS
Percentile
88.9%
Related for UB:CVE-2007-5939