HOME VULNERABILITIESCVE-2007-2443

HIGH

CVE-2007-2443

NVD-CWE-OtherPublished: June 26, 2007· Updated: Jun 16, 2026

8.3

CVSS v3.1

Official Description

Integer signedness error in the gssrpc__svcauth_unix function in svc_auth_unix.c in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute arbitrary code via a negative length value.

Technical Analysis

CVE-2007-2443 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityC

IntegrityC

AvailabilityC

AV:A/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

Canonical1 product(s)

ubuntu linux

Debian1 product(s)

debian linux

mit1 product(s)

kerberos 5

Source: NVD CPE · 6 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

Security advisories & exploits

Official NIST entry

CVE Program entry

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttp://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt

PATCHhttp://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt

PATCHhttp://www.kb.cert.org/vuls/id/365313

PATCHhttp://www.us-cert.gov/cas/techalerts/TA07-177A.html

PATCHhttp://web.mit.edu/kerberos/advisories/MITKRB5-SA-2007-004.txt

PATCHhttp://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2007-004.txt

PATCHhttp://www.kb.cert.org/vuls/id/365313

PATCHhttp://www.us-cert.gov/cas/techalerts/TA07-177A.html

ADVISORYhttp://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

ADVISORYhttp://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

ADVISORYhttp://secunia.com/advisories/25800

ADVISORYhttp://secunia.com/advisories/25801

ADVISORYhttp://secunia.com/advisories/25814

ADVISORYhttp://secunia.com/advisories/25821

ADVISORYhttp://secunia.com/advisories/25870

ADVISORYhttp://secunia.com/advisories/25888

ADVISORYhttp://secunia.com/advisories/25890

ADVISORYhttp://secunia.com/advisories/25894

ADVISORYhttp://secunia.com/advisories/25911

ADVISORYhttp://secunia.com/advisories/26033

ADVISORYhttp://secunia.com/advisories/26228

ADVISORYhttp://secunia.com/advisories/26235

ADVISORYhttp://secunia.com/advisories/26909

ADVISORYhttp://secunia.com/advisories/27706

ADVISORYhttp://secunia.com/advisories/40346

ADVISORYhttp://security.gentoo.org/glsa/glsa-200707-11.xml

ADVISORYhttp://www.debian.org/security/2007/dsa-1323

ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:137

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0384.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0562.html

ADVISORYhttp://www.securityfocus.com/archive/1/472288/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/472432/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/472507/30/5970/threaded

ADVISORYhttp://www.securityfocus.com/bid/24657

ADVISORYhttp://www.securityfocus.com/bid/25159

ADVISORYhttp://www.securitytracker.com/id?1018293

ADVISORYhttp://www.ubuntu.com/usn/usn-477-1

ADVISORYhttp://www.vupen.com/english/advisories/2007/2337

ADVISORYhttp://www.vupen.com/english/advisories/2007/2491

ADVISORYhttp://www.vupen.com/english/advisories/2007/2732

ADVISORYhttp://www.vupen.com/english/advisories/2007/3229

ADVISORYhttp://www.vupen.com/english/advisories/2010/1574

ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/35085

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7131

ADVISORYhttp://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

ADVISORYhttp://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

ADVISORYhttp://secunia.com/advisories/25800

ADVISORYhttp://secunia.com/advisories/25801

ADVISORYhttp://secunia.com/advisories/25814

ADVISORYhttp://secunia.com/advisories/25821

ADVISORYhttp://secunia.com/advisories/25870

ADVISORYhttp://secunia.com/advisories/25888

ADVISORYhttp://secunia.com/advisories/25890

ADVISORYhttp://secunia.com/advisories/25894

ADVISORYhttp://secunia.com/advisories/25911

ADVISORYhttp://secunia.com/advisories/26033

ADVISORYhttp://secunia.com/advisories/26228

ADVISORYhttp://secunia.com/advisories/26235

ADVISORYhttp://secunia.com/advisories/26909

ADVISORYhttp://secunia.com/advisories/27706

ADVISORYhttp://secunia.com/advisories/40346

ADVISORYhttp://security.gentoo.org/glsa/glsa-200707-11.xml

ADVISORYhttp://www.debian.org/security/2007/dsa-1323

ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:137

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0384.html

ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0562.html

ADVISORYhttp://www.securityfocus.com/archive/1/472288/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/472432/100/0/threaded

ADVISORYhttp://www.securityfocus.com/archive/1/472507/30/5970/threaded

ADVISORYhttp://www.securityfocus.com/bid/24657

ADVISORYhttp://www.securityfocus.com/bid/25159

ADVISORYhttp://www.securitytracker.com/id?1018293

ADVISORYhttp://www.ubuntu.com/usn/usn-477-1

ADVISORYhttp://www.vupen.com/english/advisories/2007/2337

ADVISORYhttp://www.vupen.com/english/advisories/2007/2491

ADVISORYhttp://www.vupen.com/english/advisories/2007/2732

ADVISORYhttp://www.vupen.com/english/advisories/2007/3229

ADVISORYhttp://www.vupen.com/english/advisories/2010/1574

ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/35085

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11277

ADVISORYhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7131

All References (98)

→

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.ascBroken Link

→

http://docs.info.apple.com/article.html?artnum=306172Broken Link

→

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02257427Broken Link

→

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlMailing List · Third Party Advisory

→

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlThird Party Advisory

→

http://osvdb.org/36597Broken Link

→

http://secunia.com/advisories/25800Third Party Advisory

→

http://secunia.com/advisories/25801Third Party Advisory

→

http://secunia.com/advisories/25814Third Party Advisory

→

http://secunia.com/advisories/25821Third Party Advisory

→

http://secunia.com/advisories/25870Third Party Advisory

→

http://secunia.com/advisories/25888Third Party Advisory

→

http://secunia.com/advisories/25890Third Party Advisory

→

http://secunia.com/advisories/25894Third Party Advisory

→

http://secunia.com/advisories/25911Third Party Advisory

Quick Facts

CVE IDCVE-2007-2443

CVSS Score8.3 / 10

SeverityHIGH

WeaknessNVD-CWE-Other

CISA KEVNo

Affected3 vendor(s)

PublishedJun 26, 2007

Related CVEs (NVD-CWE-Other)

Recommended Actions

→Apply vendor patches immediately
→Monitor CVE-2007-2443 in threat intel feeds
→Review IDS/IPS signatures for exploitation attempts

Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.

← All Vulnerabilities·Search for CVE-2007-2443·NVD