Unscored DSA-1367-1 2 CVEs

krb5 - arbitrary code execution

Published Sep 6, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	krb5	1.4.4-7etch4

Vulnerabilities 2

Unscored —

CVE-2007-3999 EPSS 11%

Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC librar…

krb5 Debian

Sep 5, 2007
Unscored —

CVE-2007-4743

The original patch for CVE-2007-3999 in svc_auth_gss.c in the RPCSEC_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 throu…

krb5 Debian

Sep 6, 2007