CVE-2007-5894 Other in n/a

Critical 9.3 Published 6 Dec 2007 Updated 7 Aug 2024

Uninitialized variable in MIT Kerberos FTP daemon may allow remote authenticated attackers to cause unknown impacts.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2007-5894?

CVE-2007-5894 is a critical vulnerability in Mit Kerberos 5, published on 6 Dec 2007. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating " The 'length' variable is only uninitialized if 'auth_type' is neither the 'KERBEROS_V4' nor 'GSSAPI'; this condition cannot occur in the unmodified source code.

Which versions are affected by CVE-2007-5894?

It affects 1 product.

Products include Mit Kerberos 5.

How do I fix CVE-2007-5894?

Apply the vendor's patch.

Is CVE-2007-5894 being exploited?

There is no known exploitation of CVE-2007-5894 in the wild and no public exploit code.

All Mit Kerberos 5 vulnerabilities

Sources

Also known as DEBIAN-CVE-2007-5894, GHSA-jp3p-7xp7-3qgr.