CVE-2007-2442

🗓️ 26 Jun 2007 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 93 Views

The gssrpc__svcauth_gssapi function in MIT Kerberos 5 (krb5) 1.6.1 and earlier allows remote attackers to execute arbitrary code via a zero-length RPC credential

Reporter	Title	Published	Views	Family All 90
Tenable Nessus	CentOS 3 : krb5 (CESA-2007:0384)	27 Jun 200700:00	–	nessus
Tenable Nessus	CentOS 4 / 5 : krb5 (CESA-2007:0562)	27 Jun 200700:00	–	nessus
Tenable Nessus	Debian DSA-1323-1 : krb5 - several vulnerabilities	1 Jul 200700:00	–	nessus
Tenable Nessus	Fedora 7 : krb5-1.6.1-2.1.fc7 (2007-0740)	6 Nov 200700:00	–	nessus
Tenable Nessus	GLSA-200707-11 : MIT Kerberos 5: Arbitrary remote code execution	27 Jul 200700:00	–	nessus
Tenable Nessus	HP-UX PHSS_41166 : HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02544 SSRT100107 rev.1)	28 Jun 201000:00	–	nessus
Tenable Nessus	HP-UX PHSS_41167 : HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02544 SSRT100107 rev.1)	28 Jun 201000:00	–	nessus
Tenable Nessus	HP-UX PHSS_41168 : HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code (HPSBUX02544 SSRT100107 rev.1)	28 Jun 201000:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	2 Aug 200700:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : krb5 (MDKSA-2007:137)	27 Jun 200700:00	–	nessus

NVD

Node

mit kerberos_5Range≤1.6.1

Node

debian debian_linuxMatch3.1

debian debian_linuxMatch4.0

Node

canonical ubuntu_linuxMatch6.06

canonical ubuntu_linuxMatch6.10

canonical ubuntu_linuxMatch7.04

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7344
secunia	www.secunia.com/advisories/25890
secunia	www.secunia.com/advisories/25801
security	www.security.gentoo.org/glsa/glsa-200707-11.xml
us-cert	www.us-cert.gov/cas/techalerts/TA07-177A.html
novell	www.novell.com/linux/security/advisories/2007_38_krb5.html
issues	www.issues.rpath.com/browse/RPL-1499
web	www.web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10631
vupen	www.vupen.com/english/advisories/2007/2337

23 Apr 2026 00:35Current

9.5High risk

Vulners AI Score9.5

CVSS 210

EPSS0.42571

CWE-824