VULNERABILITY INTELLIGENCE
CVE-2007-2443
CVSS score8.3 NONE
EPSS probability3.48%
CISA KEVNot currently listed
Published2007-06-26
Last modified2026-06-16
CVSS vectorAV:A/AC:L/Au:N/C:C/I:C/A:C
Description
Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory