CVE-2007-2443

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.48%

Published

Jun 26, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.

Affected Products (6)

mit · kerberos_5vulnerable

debian · debian_linuxvulnerable

canonical · ubuntu_linuxvulnerable

References (20)

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

Broken Link

http://docs.info.apple.com/article.html?artnum=306172

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427

Broken Link

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Mailing ListThird Party Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

Third Party Advisory

http://osvdb.org/36597

Broken Link

http://secunia.com/advisories/25800

Third Party Advisory

http://secunia.com/advisories/25801

Third Party Advisory

http://secunia.com/advisories/25814

Third Party Advisory

http://secunia.com/advisories/25821

Third Party Advisory

http://secunia.com/advisories/25870

Third Party Advisory

http://secunia.com/advisories/25888

Third Party Advisory

http://secunia.com/advisories/25890

Third Party Advisory

http://secunia.com/advisories/25894

Third Party Advisory

http://secunia.com/advisories/25911

Third Party Advisory

http://secunia.com/advisories/26033

Third Party Advisory

http://secunia.com/advisories/26228

Third Party Advisory

http://secunia.com/advisories/26235

Third Party Advisory

http://secunia.com/advisories/26909

Third Party Advisory

http://secunia.com/advisories/27706

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs