{"schemaVersion":3,"id":"CVE-2007-3999","aliases":["RHSA-2007:0913","DEBIAN-CVE-2007-3999","DSA-1368-1"],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.","dates":{"published":"2007-09-05T10:00:00.000Z","modified":"2024-08-07T14:37:05.912Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.10909,"percentile":0.95836,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":-0.08799999999999919,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.10997},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10909,"percentile":0.95836}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10997,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10909,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10909,"percentile":0.95836}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"debian","product":"krb5","name":"krb5","label":"krb5","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/krb5","purlType":"deb","versions":[{"text":"< 1.6.dfsg.1-7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.dfsg.1-7","eol":null,"hubHref":null},{"vendor":"debian","product":"librpcsecgss","name":"librpcsecgss","label":"librpcsecgss","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/librpcsecgss","purlType":"deb","versions":[{"text":"< 0.14-2etch1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14-2etch1","eol":null,"hubHref":null},{"vendor":"mit","product":"kerberos_5","name":"kerberos 5","label":"kerberos_5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.4","noFixRecorded":false,"fixedIn":null},{"text":"1.4.1","noFixRecorded":false,"fixedIn":null},{"text":"1.4.2","noFixRecorded":false,"fixedIn":null},{"text":"1.4.3","noFixRecorded":false,"fixedIn":null},{"text":"1.4.4","noFixRecorded":false,"fixedIn":null},{"text":"1.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5.1","noFixRecorded":false,"fixedIn":null},{"text":"1.5.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.3","noFixRecorded":false,"fixedIn":null},{"text":"1.6","noFixRecorded":false,"fixedIn":null},{"text":"1.6.1","noFixRecorded":false,"fixedIn":null},{"text":"1.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.4 | 1.4.1 | 1.4.2 | 1.4.3 | 1.4.4 | 1.5 | 1.5.1 | 1.5.2 | 1.5.3 | 1.6 | 1.6.1 | 1.6.2","eol":null,"hubHref":"/vendor/mit/kerberos_5"},{"vendor":"redhat","product":"nfs-utils-lib","name":"nfs-utils-lib","label":"nfs-utils-lib","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/nfs-utils-lib","purlType":"rpm","versions":[{"text":"< 0:1.0.6-8.z1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.6-8.z1","eol":null,"hubHref":null},{"vendor":"redhat","product":"nfs-utils-lib-debuginfo","name":"nfs-utils-lib-debuginfo","label":"nfs-utils-lib-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/nfs-utils-lib-debuginfo","purlType":"rpm","versions":[{"text":"< 0:1.0.6-8.z1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.6-8.z1","eol":null,"hubHref":null},{"vendor":"redhat","product":"nfs-utils-lib-devel","name":"nfs-utils-lib-devel","label":"nfs-utils-lib-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/nfs-utils-lib-devel","purlType":"rpm","versions":[{"text":"< 0:1.0.6-8.z1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.6-8.z1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200709-01.xml","label":"www.gentoo.org/security/en/glsa/glsa-200709-01.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html","label":"www.redhat.com/archives/fedora-package-announce/2007-September/msg00087.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.securityfocus.com/archive/1/479251/100/0/threaded","label":"www.securityfocus.com/archive/1/479251/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://secunia.com/advisories/26713","label":"secunia.com/advisories/26713","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26822","label":"secunia.com/advisories/26822","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27043","label":"secunia.com/advisories/27043","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0803/references","label":"www.vupen.com/english/advisories/2008/0803/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/26699","label":"secunia.com/advisories/26699","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2007_19_sr.html","label":"www.novell.com/linux/security/advisories/2007_19_sr.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.vupen.com/english/advisories/2007/3060","label":"www.vupen.com/english/advisories/2007/3060","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/26680","label":"secunia.com/advisories/26680","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26783","label":"secunia.com/advisories/26783","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1018647","label":"www.securitytracker.com/id?1018647","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.securityfocus.com/bid/26444","label":"www.securityfocus.com/bid/26444","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.vupen.com/english/advisories/2007/3051","label":"www.vupen.com/english/advisories/2007/3051","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://secunia.com/advisories/27756","label":"secunia.com/advisories/27756","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/26684","label":"secunia.com/advisories/26684","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1367","label":"www.debian.org/security/2007/dsa-1367","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0951.html","label":"www.redhat.com/support/errata/RHSA-2007-0951.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/26728","label":"secunia.com/advisories/26728","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26700","label":"secunia.com/advisories/26700","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3162","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3162","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=250973","label":"bugzilla.redhat.com/show_bug.cgi?id=250973","hostname":"bugzilla.redhat.com","tags":["X Refsource MISC","REPORT"]},{"url":"http://secunia.com/advisories/26987","label":"secunia.com/advisories/26987","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2007/0026/","label":"www.trustix.org/errata/2007/0026/","hostname":"www.trustix.org","tags":["Vendor Advisory","X Refsource TRUSTIX"]},{"url":"http://secunia.com/advisories/26676","label":"secunia.com/advisories/26676","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9379","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9379","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html","label":"lists.apple.com/archives/security-announce/2007/Nov/msg00002.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE"]},{"url":"http://docs.info.apple.com/article.html?artnum=307041","label":"docs.info.apple.com/article.html?artnum=307041","hostname":"docs.info.apple.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.ubuntu.com/usn/usn-511-1","label":"www.ubuntu.com/usn/usn-511-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/27081","label":"secunia.com/advisories/27081","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/478748/100/0/threaded","label":"www.securityfocus.com/archive/1/478748/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.novell.com/linux/security/advisories/2007_24_sr.html","label":"www.novell.com/linux/security/advisories/2007_24_sr.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/29270","label":"secunia.com/advisories/29270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00173.html","label":"www.redhat.com/archives/fedora-package-announce/2008-March/msg00173.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201319-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-66-201319-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.vupen.com/english/advisories/2007/3868","label":"www.vupen.com/english/advisories/2007/3868","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://security.gentoo.org/glsa/glsa-200710-01.xml","label":"security.gentoo.org/glsa/glsa-200710-01.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0913.html","label":"www.redhat.com/support/errata/RHSA-2007-0913.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://lists.rpath.com/pipermail/security-announce/2007-September/000237.html","label":"lists.rpath.com/pipermail/security-announce/2007-September/000237.html","hostname":"lists.rpath.com","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.debian.org/security/2007/dsa-1368","label":"www.debian.org/security/2007/dsa-1368","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0858.html","label":"www.redhat.com/support/errata/RHSA-2007-0858.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:181","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:181","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-07-052.html","label":"www.zerodayinitiative.com/advisories/ZDI-07-052.html","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC"]},{"url":"http://secunia.com/advisories/26691","label":"secunia.com/advisories/26691","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26896","label":"secunia.com/advisories/26896","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt","label":"web.mit.edu/Kerberos/advisories/MITKRB5-SA-2007-006.txt","hostname":"web.mit.edu","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/26697","label":"secunia.com/advisories/26697","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/27146","label":"secunia.com/advisories/27146","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/883632","label":"www.kb.cert.org/vuls/id/883632","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://secunia.com/advisories/27643","label":"secunia.com/advisories/27643","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3052","label":"www.vupen.com/english/advisories/2007/3052","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36437","label":"exchange.xforce.ibmcloud.com/vulnerabilities/36437","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/bid/25534","label":"www.securityfocus.com/bid/25534","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-319A.html","label":"www.us-cert.gov/cas/techalerts/TA07-319A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://secunia.com/advisories/26705","label":"secunia.com/advisories/26705","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3092","label":"securityreason.com/securityalert/3092","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-396.htm","label":"support.avaya.com/elmodocs2/security/ASA-2007-396.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/26792","label":"secunia.com/advisories/26792","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/29247","label":"secunia.com/advisories/29247","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103060-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-103060-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:174","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:174","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0913","label":"access.redhat.com/errata/RHSA-2007:0913","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0913.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0913.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-3999","label":"access.redhat.com/security/cve/CVE-2007-3999","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-3999","label":"www.cve.org/CVERecord?id=CVE-2007-3999","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3999","label":"nvd.nist.gov/vuln/detail/CVE-2007-3999","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-3999","label":"security-tracker.debian.org/tracker/CVE-2007-3999","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1367-1","OPENSUSE-SU-2024:10899-1","RHSA-2007:0858","RHSA-2007:0951"],"duplicates":[],"related":["OPENSUSE-SU-2024:10899-1"]},"timeline":[{"kind":"published","date":"2007-09-05T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T14:37:05.912Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:48:53.870Z","stale":false,"partial":false}}