CVE-2007-4743 The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other appli...
HighCVSS 10.0
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mit kerberos 5 | = 1.4 | No fix listed |
| mit kerberos 5 | = 1.4.1 | No fix listed |
| mit kerberos 5 | = 1.4.2 | No fix listed |
| mit kerberos 5 | = 1.4.3 | No fix listed |
| mit kerberos 5 | = 1.4.4 | No fix listed |
| mit kerberos 5 | = 1.5 | No fix listed |
| mit kerberos 5 | = 1.5.1 | No fix listed |
| mit kerberos 5 | = 1.5.2 | No fix listed |
| mit kerberos 5 | = 1.5.3 | No fix listed |
| mit kerberos 5 | = 1.6 | No fix listed |
| mit kerberos 5 | = 1.6.1 | No fix listed |
| mit kerberos 5 | = 1.6.2 | No fix listed |
| debian/krb5(Debian:12) | < 1.6.dfsg.1-7 | 1.6.dfsg.1-7 |
| debian/krb5(Debian:13) | < 1.6.dfsg.1-7 | 1.6.dfsg.1-7 |
| debian/krb5(Debian:14) | < 1.6.dfsg.1-7 | 1.6.dfsg.1-7 |
References
- article.gmane.org patch
- docs.info.apple.com
- APPLE-SA-2007-11-14 vendor-advisory
- 26699 third-party-advisory
- 26987 third-party-advisory
- 27643 third-party-advisory
- DSA-1387 vendor-advisory
- SUSE-SR:2007:019 vendor-advisory
- RHSA-2007:0892 vendor-advisory
- 20070906 rPSA-2007-0179-1 krb5 krb5-server krb5-services krb5-test krb5-workstation mailing-list
- 20070907 FLEA-2007-0050-1 krb5 krb5-workstation mailing-list
- 26444 vdb-entry
- USN-511-2 vendor-advisory
- TA07-319A third-party-advisory us-government-resource
- ADV-2007-3868 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10239 signature vdb-entry
- Debian Security Tracker CVE-2007-4743 vendor-advisory
- bugs.debian.org issue-tracking