NVD

Id
56860  
Name
CVE-2007-4743  
Description
The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-09-06  
Modified Date
2011-03-07  
Seq
2007-4743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290012 56860 CVE-2007-4743 http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86  View
290013 56860 CVE-2007-4743 http://docs.info.apple.com/article.html?artnum=307041  View
290014 56860 CVE-2007-4743 APPLE-SA-2007-11-14  View
290015 56860 CVE-2007-4743 oval:org.mitre.oval:def:10239  View
290016 56860 CVE-2007-4743 DSA-1387  View
290017 56860 CVE-2007-4743 SUSE-SR:2007:019  View
290018 56860 CVE-2007-4743 RHSA-2007:0892  View
290019 56860 CVE-2007-4743 20070906 rPSA-2007-0179-1 krb5 krb5-server krb5-services krb5-test krb5-workstation  View
290020 56860 CVE-2007-4743 20070907 FLEA-2007-0050-1 krb5 krb5-workstation  View
290021 56860 CVE-2007-4743 26444  View
290022 56860 CVE-2007-4743 USN-511-2  View
290023 56860 CVE-2007-4743 TA07-319A  View
290024 56860 CVE-2007-4743 ADV-2007-3868  View
290025 56860 CVE-2007-4743 https://issues.rpath.com/browse/RPL-1696  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52014 JVNDB-2007-000677 MIT Kerberos のパッチにおけるバッファオーバーフローの脆弱性 MIT Kerberos における RPCSEC_GSS RPC ライブラリの JVNDB-2007-000642 (CVE-2007-3999) のパッチには、特定の環境化や構成において、適切にバッファ長をチェックしないために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4743 28098 CVE-2007-4743 56860 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000677.html 2007-09-06 2007-12-06 View