Add CVE-2007-5902 (#2)

* Add CVE-2007-5902

Signed-off-by: Josh Bressers <[email protected]>

* 1.7 was the upstream release version

Signed-off-by: Weston Steimel <[email protected]>

---------

Signed-off-by: Josh Bressers <[email protected]>
Signed-off-by: Weston Steimel <[email protected]>
Co-authored-by: Josh Bressers <[email protected]>

Author: westonsteimel

data/2007/6/ANCHORE-2007-6901.toml

@@ -0,0 +1,80 @@
+[schema]
+version = "0.1.0"
+
+[snapshot]
+captured = 2025-11-13T16:23:40.512771Z
+  [[snapshot.cve5]]
+  id = "CVE-2007-5902"
+  published = 2007-12-06T02:00:00
+  reserved = 2007-11-09T00:00:00
+  updated = 2024-08-07T15:47:00.452000Z
+
+    [snapshot.cve5.digest]
+    xxh128 = "7da07ebe6b92f1b30587cb359bc0561d"
+
+    [snapshot.cve5.overview]
+    urls = ["https://nvd.nist.gov/vuln/detail/CVE-2007-5902"]
+    cna = "mitre"
+    description = """Integer overflow in the svcauth_gss_get_principal function in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (krb5) allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request."""
+    references = [
+      "http://bugs.gentoo.org/show_bug.cgi?id=199214",
+      "http://osvdb.org/44748",
+      "http://seclists.org/fulldisclosure/2007/Dec/0176.html",
+      "http://seclists.org/fulldisclosure/2007/Dec/0321.html",
+      "http://secunia.com/advisories/28636",
+      "http://secunia.com/advisories/29457",
+      "http://secunia.com/advisories/39290",
+      "http://secunia.com/advisories/39784",
+      "http://ubuntu.com/usn/usn-924-1",
+      "http://wiki.rpath.com/Advisories:rPSA-2008-0112",
+      "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112",
+      "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html",
+      "http://www.securityfocus.com/archive/1/489883/100/0/threaded",
+      "http://www.securityfocus.com/bid/26750",
+      "http://www.ubuntu.com/usn/USN-940-1",
+      "http://www.vupen.com/english/advisories/2010/1192",
+      "https://issues.rpath.com/browse/RPL-2012",
+    ]
+  [[snapshot.nvd]]
+  id = "CVE-2007-5902"
+  published = 2007-12-06T02:46:00
+  updated = 2025-04-09T00:30:58.490000
+
+    [snapshot.nvd.digest]
+    xxh128 = "d2652b73bf4ca422e975367c15c3f6ab"
+
+[curator]
+converted_from_cve5 = true
+needs_review = true
+
+[vuln]
+id = "ANCHORE-2007-6901"
+
+  [[vuln.providers.nvd]]
+  id = "CVE-2007-5902"
+
+    [vuln.providers.nvd.enrichment]
+    reason = "Add kerberos 5 affected details"
+
+    [[vuln.providers.nvd.products.override.cve5]]
+
+    vendor = "mit"
+    product = "krb5"
+      [[vuln.providers.nvd.products.override.cve5.source]]
+      url = "https://github.com/krb5/krb5"
+      [[vuln.providers.nvd.products.override.cve5.cpe]]
+      vendor = "mit"
+      product = "kerberos_5"
+
+      [[vuln.providers.nvd.products.override.cve5.cpe]]
+      vendor = "mit"
+      product = "krb5"
+      [[vuln.providers.nvd.products.override.cve5.affected]]
+        [vuln.providers.nvd.products.override.cve5.affected.version]
+        scheme = "custom"
+        greater_than_or_equal = "0"
+        less_than = "1.7"
+        [[vuln.providers.nvd.products.override.cve5.affected.remediation]]
+        version = "1.7"
+          [[vuln.providers.nvd.products.override.cve5.affected.remediation.patch]]
+          commit = "01b3b9cbb23f8e8790ba0daeac24667c4f9f34ea"