Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2007-4743
HistorySep 06, 2007 - 12:00 a.m.

CVE-2007-4743

2007-09-0600:00:00
ubuntu.com
ubuntu.com
11

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.967 High

EPSS

Percentile

99.7%

JSON

The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS
RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the
Kerberos administration daemon (kadmind) and other applications that use
krb5, does not correctly check the buffer length in some environments and
architectures, which might allow remote attackers to conduct a buffer
overflow attack.

Notes

Author Note
kees Debian package is missing mention of CVE-2007-4743 (and CVE-2007-4000)
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkrb5<Β 1.4.3-5ubuntu0.6UNKNOWN
ubuntu6.10noarchkrb5<Β 1.4.3-9ubuntu1.5UNKNOWN
ubuntu7.04noarchkrb5<Β 1.4.4-5ubuntu3.3UNKNOWN
ubuntu6.06noarchlibrpcsecgss<Β 0.7-0ubuntu1.2UNKNOWN
ubuntu6.10noarchlibrpcsecgss<Β 0.13-2ubuntu0.2UNKNOWN
ubuntu7.04noarchlibrpcsecgss<Β 0.14-2ubuntu1.2UNKNOWN

Related

openvas 40
nessus 42
debiancve 3
redhat 4
prion 3
oraclelinux 4
cvelist 3
debian 4
cve 3
osv 1
centos 4
nvd 3
fedora 6
gentoo 2
ubuntu 2
saint 4
securityvulns 2
zdi 1
cert 2
ubuntucve 2
checkpoint_advisories 1
seebug 1
openvas
openvas
Mandriva Update for krb5 MDKSA-2007:174-1 (krb5)
2009-04-09 00:00:00
Mandriva Update for krb5 MDKSA-2007:174-1 (krb5)
2009-04-09 00:00:00
Debian: Security Advisory (DSA-1387-1)
2008-01-17 00:00:00
nessus
nessus
SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)
2007-12-13 00:00:00
Ubuntu 6.06 LTS / 6.10 / 7.04 : krb5, librpcsecgss vulnerability (USN-511-1)
2007-11-10 00:00:00
Mandrake Linux Security Advisory : krb5 (MDKSA-2007:174-1)
2007-09-07 00:00:00
debiancve
debiancve
CVE-2007-4743
2007-09-06 22:17:00
CVE-2007-3999
2007-09-05 10:17:00
CVE-2007-4000
2007-09-05 10:17:00
redhat
redhat
(RHSA-2007:0892) Important: krb5 security update
2007-09-07 00:00:00
(RHSA-2007:0858) Important: krb5 security update
2007-09-04 00:00:00
(RHSA-2007:0913) Important: nfs-utils-lib security update
2007-09-19 00:00:00
prion
prion
Buffer overflow
2007-09-06 22:17:00
Stack overflow
2007-09-05 10:17:00
Null pointer dereference
2007-09-05 10:17:00
oraclelinux
oraclelinux
Important: krb5 security update
2007-09-07 00:00:00
Important: krb5 security update
2007-09-04 00:00:00
Important: nfs-utils-lib security update
2007-09-19 00:00:00
cvelist
cvelist
CVE-2007-4743
2007-09-06 22:00:00
CVE-2007-3999
2007-09-05 10:00:00
CVE-2007-4000
2007-09-05 10:00:00
debian
debian
[SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution
2007-10-15 21:10:12
[SECURITY] [DSA 1367-1] New krb5 packages fix arbitrary code execution
2007-09-04 18:30:50
[SECURITY] [DSA 1368-1] New librpcsecgss packages fix arbitrary code execution
2007-09-04 18:34:21
cve
cve
CVE-2007-4743
2007-09-06 22:17:00
CVE-2007-3999
2007-09-05 10:17:00
CVE-2007-4000
2007-09-05 10:17:00
osv
osv
librpcsecgss
2007-10-15 00:00:00
centos
centos
krb5 security update
2007-09-07 13:58:22
krb5 security update
2007-09-05 00:50:27
nfs security update
2007-09-19 17:59:57
nvd
nvd
CVE-2007-4743
2007-09-06 22:17:00
CVE-2007-3999
2007-09-05 10:17:00
CVE-2007-4000
2007-09-05 10:17:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: krb5-1.5-22.fc6
2007-09-04 21:28:43
[SECURITY] Fedora 7 Update: krb5-1.6.1-4.fc7
2007-09-07 17:21:06
[SECURITY] Fedora 8 Update: libtirpc-0.1.7-15.fc8
2008-03-06 16:36:06
gentoo
gentoo
MIT Kerberos 5: Multiple vulnerabilities
2007-09-11 00:00:00
RPCSEC_GSS library: Buffer overflow
2007-10-04 00:00:00
ubuntu
ubuntu
Kerberos vulnerability
2007-09-07 00:00:00
Kerberos vulnerability
2007-09-04 00:00:00
saint
saint
MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow
2007-12-03 00:00:00
MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow
2007-12-03 00:00:00
MIT Kerberos 5 RPC library RPCSEC_GSS buffer overflow
2007-12-03 00:00:00
securityvulns
securityvulns
MIT Kerberos buffer overflow
2007-09-13 00:00:00
ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability
2007-09-13 00:00:00
zdi
zdi
Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability
2007-09-12 00:00:00
cert
cert
MIT Kerberos 5 kadmind buffer overflow vulnerability
2007-09-04 00:00:00
MIT Kerberos 5 kadmind privilege escalation vulnerability
2007-09-04 00:00:00
ubuntucve
ubuntucve
CVE-2007-3999
2007-09-05 00:00:00
CVE-2007-4000
2007-09-05 00:00:00
checkpoint_advisories
checkpoint_advisories
MIT Kerberos kadmind RPC Library RPCSEC_GSS Authentication Buffer Overflow (CVE-2007-3999)
2007-09-06 00:00:00
seebug
seebug
MIT Kerberos 5 KAdminDζœεŠ‘η¨‹εΊζœͺεˆε§‹εŒ–ζŒ‡ι’ˆθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2007-09-06 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.967 High

EPSS

Percentile

99.7%

JSON
Related for UB:CVE-2007-4743
openvas40nessus42debiancve3redhat4prion3oraclelinux4cvelist3debian4cve3osv1centos4nvd3fedora6gentoo2ubuntu2saint4securityvulns2zdi1cert2ubuntucve2checkpoint_advisories1seebug1