CVE-2007-4743

Source
https://nvd.nist.gov/vuln/detail/CVE-2007-4743
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2007-4743.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2007-4743
Downstream
Published
2007-09-06T22:17:00Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and other applications that use krb5, does not correctly check the buffer length in some environments and architectures, which might allow remote attackers to conduct a buffer overflow attack.

References

Affected packages