Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-4743 Details

Description

The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86	CVE	Patch
http://docs.info.apple.com/article.html?artnum=307041	CVE
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html	CVE
http://secunia.com/advisories/26699	CVE
http://secunia.com/advisories/26987	CVE
http://secunia.com/advisories/27643	CVE
https://issues.rpath.com/browse/RPL-1696	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10239	CVE
http://www.debian.org/security/2007/dsa-1387	CVE
http://www.novell.com/linux/security/advisories/2007_19_sr.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0892.html	CVE
http://www.securityfocus.com/archive/1/478748/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/478794/100/0/threaded	CVE
http://www.securityfocus.com/bid/26444	CVE
http://www.ubuntu.com/usn/usn-511-2	CVE
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	CVE	US Government Resource
http://www.vupen.com/english/advisories/2007/3868	CVE
http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86	[email protected]	Patch
http://docs.info.apple.com/article.html?artnum=307041	[email protected]
http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html	[email protected]
http://secunia.com/advisories/26699	[email protected]
http://secunia.com/advisories/26987	[email protected]
http://secunia.com/advisories/27643	[email protected]
https://issues.rpath.com/browse/RPL-1696	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10239	[email protected]
http://www.debian.org/security/2007/dsa-1387	[email protected]
http://www.novell.com/linux/security/advisories/2007_19_sr.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0892.html	[email protected]
http://www.securityfocus.com/archive/1/478748/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/478794/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/26444	[email protected]
http://www.ubuntu.com/usn/usn-511-2	[email protected]
http://www.us-cert.gov/cas/techalerts/TA07-319A.html	[email protected]	US Government Resource
http://www.vupen.com/english/advisories/2007/3868	[email protected]

see all 34 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
mit kerberos 5	1.4 1.4.1 1.4.2 1.4.3 1.4.4
CPE cpe:2.3:a:mit:kerberos_5:1.4:::::::* cpe:2.3:a:mit:kerberos_5:1.4.1:::::::* cpe:2.3:a:mit:kerberos_5:1.4.2:::::::* cpe:2.3:a:mit:kerberos_5:1.4.3:::::::* cpe:2.3:a:mit:kerberos_5:1.4.4:::::::* cpe:2.3:a:mit:kerberos_5:1.5:::::::* cpe:2.3:a:mit:kerberos_5:1.5.1:::::::* cpe:2.3:a:mit:kerberos_5:1.5.2:::::::* cpe:2.3:a:mit:kerberos_5:1.5.3:::::::* cpe:2.3:a:mit:kerberos_5:1.6:::::::* cpe:2.3:a:mit:kerberos_5:1.6.1:::::::* cpe:2.3:a:mit:kerberos_5:1.6.2:::::::* Remediation No remediation found in references.

Product

Versions

mit kerberos 5

1.4

1.4.1

1.4.2

1.4.3

1.4.4

CPE

cpe:2.3:a:mit:kerberos_5:1.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:mit:kerberos_5:1.6.2:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

19 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Jan 21, 2020	CPE Deprecation Remap	[email protected]
Oct 15, 2018	CVE Modified	[email protected]
Sep 29, 2017	CVE Modified	[email protected]
Sep 7, 2007	Initial Analysis	[email protected]