Dashboard / CVE-2007-5894

CVE-2007-5894

CRITICAL
INFO Priority: 0.30 BB Relevance: 44/100
Published: 2007-12-06 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Network

CVSS Vector Breakdown

AV: Network
AC: M
C: C
I: C
A: C

Description

The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating " The 'length' variable is only uninitialized if 'auth_type' is neither the 'KERBEROS_V4' nor 'GSSAPI'; this condition cannot occur in the unmodified source code.

Affected Software (1)

VendorProductVersion
mit kerberos_5 < 1.6.4

References & Advisories (12)

http://secunia.com/advisories/28636
Vendor Advisory Broken Link
http://secunia.com/advisories/29457
Vendor Advisory Broken Link
http://bugs.gentoo.org/show_bug.cgi?id=199205
Issue Tracking Mailing List Third Party Advisory

Bug Bounty Relevance

44 / 100
✓ Network accessible

CVSS Score

9.3 / 10.0 v2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS — Exploitation Probability

3.28%
Raw Score 0.032760
Percentile 88.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.03276
2026-11-12
0.03276
2026-11-10
0.03276
2026-11-09
0.03276
2026-11-08
0.03276
2026-11-07
0.03276
2026-11-06
0.02685

Intelligence Sources

nvd ref →

External Links