VDB
DEBIAN-CVE-2007-4743
DEBIAN-CVE-2007-4743
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | krb5 | 0, 0, 0 |
| Debian:12 | krb5 | 0, 0, 0 |
| Debian:13 | krb5 | 0, 0, 0 |
| Debian:11 | krb5 | 0, 0, 0 |
Timeline
- Sep 6, 2007 CVE Published
- Apr 28, 2026 CVE Updated