NVD

Id
56133  
Name
CVE-2007-3999  
Description
Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-05  
Modified Date
2011-03-07  
Seq
2007-3999  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285891 56133 CVE-2007-3999 http://docs.info.apple.com/article.html?artnum=307041  View
285892 56133 CVE-2007-3999 APPLE-SA-2007-11-14  View
285893 56133 CVE-2007-3999 [security-announce] 20070906 rPSA-2007-0179-2 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
285894 56133 CVE-2007-3999 oval:org.mitre.oval:def:3162  View
285895 56133 CVE-2007-3999 oval:org.mitre.oval:def:9379  View
285896 56133 CVE-2007-3999 GLSA-200710-01  View
285897 56133 CVE-2007-3999 3092  View
285898 56133 CVE-2007-3999 103060  View
285899 56133 CVE-2007-3999 201319  View
285900 56133 CVE-2007-3999 http://support.avaya.com/elmodocs2/security/ASA-2007-396.htm  View
285901 56133 CVE-2007-3999 http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt  View
285902 56133 CVE-2007-3999 DSA-1367  View
285903 56133 CVE-2007-3999 DSA-1368  View
285904 56133 CVE-2007-3999 GLSA-200709-01  View
285905 56133 CVE-2007-3999 VU#883632  View
285906 56133 CVE-2007-3999 MDKSA-2007:174  View
285907 56133 CVE-2007-3999 MDKSA-2007:181  View
285908 56133 CVE-2007-3999 SUSE-SR:2007:019  View
285909 56133 CVE-2007-3999 SUSE-SR:2007:024  View
285910 56133 CVE-2007-3999 RHSA-2007:0858  View
285911 56133 CVE-2007-3999 RHSA-2007:0913  View
285912 56133 CVE-2007-3999 RHSA-2007:0951  View
285913 56133 CVE-2007-3999 20070906 rPSA-2007-0179-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
285914 56133 CVE-2007-3999 20070912 ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability  View
285915 56133 CVE-2007-3999 25534  View
285916 56133 CVE-2007-3999 26444  View
285917 56133 CVE-2007-3999 1018647  View
285918 56133 CVE-2007-3999 2007-0026  View
285919 56133 CVE-2007-3999 USN-511-1  View
285920 56133 CVE-2007-3999 TA07-319A  View
285921 56133 CVE-2007-3999 ADV-2007-3051  View
285922 56133 CVE-2007-3999 ADV-2007-3052  View
285923 56133 CVE-2007-3999 ADV-2007-3060  View
285924 56133 CVE-2007-3999 ADV-2007-3868  View
285925 56133 CVE-2007-3999 ADV-2008-0803  View
285926 56133 CVE-2007-3999 http://www.zerodayinitiative.com/advisories/ZDI-07-052.html  View
285927 56133 CVE-2007-3999 kerberos-rpcsecgss-bo(36437)  View
285928 56133 CVE-2007-3999 https://bugzilla.redhat.com/show_bug.cgi?id=250973  View
285929 56133 CVE-2007-3999 FEDORA-2007-2017  View
285930 56133 CVE-2007-3999 FEDORA-2008-1017  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51979 JVNDB-2007-000642 MIT Kerberos 5 kadmind にバッファオーバーフローの脆弱性 MIT Kerberos 5 kadmind には、RPC ライブラリに起因するバッファオーバーフローの脆弱性が存在します。 CVE-2007-3999 27354 CVE-2007-3999 56133 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000642.html 2007-09-04 2008-10-29 View