CVE ID:	CVE-2007-0957
Description:	Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) and Key Distribution Center (KDC), in MIT krb5 before 1.6.1 allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via crafted arguments, possibly involving certain format string specifiers.
Test IDs:	1.3.6.1.4.1.25623.1.0.58328
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0957 http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html BugTraq ID: 23285 http://www.securityfocus.com/bid/23285 Bugtraq: 20070403 MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957] (Google Search) http://www.securityfocus.com/archive/1/464592/100/0/threaded Bugtraq: 20070404 rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Google Search) http://www.securityfocus.com/archive/1/464666/100/0/threaded Bugtraq: 20070405 FLEA-2007-0008-1: krb5 (Google Search) http://www.securityfocus.com/archive/1/464814/30/7170/threaded Cert/CC Advisory: TA07-093B http://www.us-cert.gov/cas/techalerts/TA07-093B.html Cert/CC Advisory: TA07-109A http://www.us-cert.gov/cas/techalerts/TA07-109A.html CERT/CC vulnerability note: VU#704024 http://www.kb.cert.org/vuls/id/704024 Debian Security Information: DSA-1276 (Google Search) http://www.debian.org/security/2007/dsa-1276 http://security.gentoo.org/glsa/glsa-200704-02.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10757 RedHat Security Advisories: RHSA-2007:0095 http://www.redhat.com/support/errata/RHSA-2007-0095.html http://www.securitytracker.com/id?1017849 http://secunia.com/advisories/24706 http://secunia.com/advisories/24735 http://secunia.com/advisories/24736 http://secunia.com/advisories/24740 http://secunia.com/advisories/24750 http://secunia.com/advisories/24757 http://secunia.com/advisories/24785 http://secunia.com/advisories/24786 http://secunia.com/advisories/24798 http://secunia.com/advisories/24817 http://secunia.com/advisories/24966 http://secunia.com/advisories/25464 SGI Security Advisory: 20070401-01-P ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc http://sunsolve.sun.com/search/document.do?assetkey=1-26-102930-1 SuSE Security Announcement: SUSE-SA:2007:025 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html http://www.ubuntu.com/usn/usn-449-1 http://www.vupen.com/english/advisories/2007/1218 http://www.vupen.com/english/advisories/2007/1250 http://www.vupen.com/english/advisories/2007/1470 http://www.vupen.com/english/advisories/2007/1983 XForce ISS Database: kerberos-krb5klogsyslog-bo(33411) https://exchange.xforce.ibmcloud.com/vulnerabilities/33411