Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-1216

Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MIT krb5 before 1.6.1, when used with the authentication method provided by the RPCSEC_GSS RPC library, allows remote authenticated users to execute arbitrary code and modify the Kerberos key database via a message with an "an invalid direction encoding".

Security Impact Summary

CVE-2007-1216 is a security vulnerability that . Impacting 3 products from mit, from canonical, from debian organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2007, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.

Published

2007-04-06T01:19:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-415

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mit	kerberos_5	< 1.6.1	Yes
Operating System	canonical	ubuntu_linux	5.10	Yes
Operating System	canonical	ubuntu_linux	6.06	Yes
Operating System	canonical	ubuntu_linux	6.10	Yes
Operating System	debian	debian_linux	3.1	Yes
Operating System	debian	debian_linux	4.0	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc Broken Link ([email protected])
http://docs.info.apple.com/article.html?artnum=305391 Broken Link ([email protected])
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 Broken Link ([email protected])
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html Mailing List, Third Party Advisory ([email protected])
http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html Broken Link ([email protected])
http://secunia.com/advisories/24706 Third Party Advisory ([email protected])
http://secunia.com/advisories/24735 Third Party Advisory ([email protected])
http://secunia.com/advisories/24736 Third Party Advisory ([email protected])
http://secunia.com/advisories/24740 Third Party Advisory ([email protected])
http://secunia.com/advisories/24750 Third Party Advisory ([email protected])
http://secunia.com/advisories/24757 Third Party Advisory ([email protected])
http://secunia.com/advisories/24785 Third Party Advisory ([email protected])
http://secunia.com/advisories/24786 Third Party Advisory ([email protected])
http://secunia.com/advisories/24817 Third Party Advisory ([email protected])
http://secunia.com/advisories/24966 Third Party Advisory ([email protected])
http://secunia.com/advisories/25388 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200704-02.xml Third Party Advisory ([email protected])
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-003.txt Patch, Vendor Advisory ([email protected])
http://www.debian.org/security/2007/dsa-1276 Third Party Advisory ([email protected])
http://www.kb.cert.org/vuls/id/419344 Third Party Advisory, US Government Resource ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2007-0095.html Third Party Advisory ([email protected])
http://www.securityfocus.com/archive/1/464591/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/archive/1/464666/100/0/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/archive/1/464814/30/7170/threaded Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/23282 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1017852 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/usn-449-1 Third Party Advisory ([email protected])
http://www.us-cert.gov/cas/techalerts/TA07-093B.html Third Party Advisory, US Government Resource ([email protected])
http://www.us-cert.gov/cas/techalerts/TA07-109A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2007/1218 Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2007/1470 Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2007/1916 Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/33413 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11135 Broken Link, Third Party Advisory ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20070401-01-P.asc Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://docs.info.apple.com/article.html?artnum=305391 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056923 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.suse.com/archive/suse-security-announce/2007-Apr/0001.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24706 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24735 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24736 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24740 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24750 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24757 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24785 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24786 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24817 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/24966 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/25388 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200704-02.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-003.txt Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2007/dsa-1276 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/419344 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:077 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2007-0095.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/464591/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/464666/100/0/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/464814/30/7170/threaded Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/23282 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1017852 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-449-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA07-093B.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA07-109A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1218 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1470 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2007/1916 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/33413 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11135 Broken Link, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For mit's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.