{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated nfs-utils-lib package to correct a security flaw is now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The nfs-utils-lib package contains support libraries that are needed by the\ncommands and daemons of the nfs-utils package.\n\nTenable Network Security discovered a stack buffer overflow flaw in the RPC\nlibrary used by nfs-utils-lib. A remote unauthenticated attacker who can\naccess an application linked against nfs-utils-lib could trigger this flaw\nand cause the application to crash. On Red Hat Enterprise Linux 4 it is not\npossible to exploit this flaw to run arbitrary code as the overflow is\nblocked by FORTIFY_SOURCE. (CVE-2007-3999)\n\nUsers of nfs-utils-lib are advised to upgrade to this updated package,\nwhich contains a backported patch that resolves this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0913",
        "url": "https://access.redhat.com/errata/RHSA-2007:0913"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "250973",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250973"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0913.json"
      }
    ],
    "title": "Red Hat Security Advisory: nfs-utils-lib security update",
    "tracking": {
      "current_release_date": "2026-06-25T10:34:25+00:00",
      "generator": {
        "date": "2026-06-25T10:34:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.1.0"
        }
      },
      "id": "RHSA-2007:0913",
      "initial_release_date": "2007-09-19T15:51:00+00:00",
      "revision_history": [
        {
          "date": "2007-09-19T15:51:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-01-08T12:37:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-25T10:34:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.i386",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.i386",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.src",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.src",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.ppc",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.ppc",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.s390x",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.s390x",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
                "product": {
                  "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
                  "product_id": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-debuginfo@1.0.6-8.z1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-0:1.0.6-8.z1.s390",
                "product": {
                  "name": "nfs-utils-lib-0:1.0.6-8.z1.s390",
                  "product_id": "nfs-utils-lib-0:1.0.6-8.z1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib@1.0.6-8.z1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
                "product": {
                  "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
                  "product_id": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nfs-utils-lib-devel@1.0.6-8.z1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.ppc"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390x"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.src"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ppc"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390x"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.src"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-0:1.0.6-8.z1.src"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-0:1.0.6-8.z1.src"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
        },
        "product_reference": "nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-3999",
      "discovery_date": "2007-08-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "250973"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by the Kerberos administration daemon (kadmind) and some third-party applications that use krb5, allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long string in an RPC message.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "krb5 RPC library buffer overflow",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.i386",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.ia64",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.ppc",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390x",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.src",
          "4AS:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
          "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
          "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
          "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.i386",
          "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.src",
          "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
          "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
          "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
          "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
          "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
          "4ES:nfs-utils-lib-0:1.0.6-8.z1.i386",
          "4ES:nfs-utils-lib-0:1.0.6-8.z1.ia64",
          "4ES:nfs-utils-lib-0:1.0.6-8.z1.src",
          "4ES:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
          "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
          "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
          "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
          "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
          "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
          "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
          "4WS:nfs-utils-lib-0:1.0.6-8.z1.i386",
          "4WS:nfs-utils-lib-0:1.0.6-8.z1.ia64",
          "4WS:nfs-utils-lib-0:1.0.6-8.z1.src",
          "4WS:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
          "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
          "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
          "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
          "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
          "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
          "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-3999"
        },
        {
          "category": "external",
          "summary": "RHBZ#250973",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=250973"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-3999",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-3999"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-3999",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-3999"
        }
      ],
      "release_date": "2007-09-04T19:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-09-19T15:51:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  \n\nThis update is available via Red Hat Network.  Details on how to use \nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.i386",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.ia64",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.ppc",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.s390x",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.src",
            "4AS:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ppc",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.s390x",
            "4AS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.ppc",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.s390x",
            "4AS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
            "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.i386",
            "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.src",
            "4Desktop:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
            "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
            "4Desktop:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
            "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
            "4Desktop:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
            "4ES:nfs-utils-lib-0:1.0.6-8.z1.i386",
            "4ES:nfs-utils-lib-0:1.0.6-8.z1.ia64",
            "4ES:nfs-utils-lib-0:1.0.6-8.z1.src",
            "4ES:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
            "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
            "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
            "4ES:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
            "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
            "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
            "4ES:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64",
            "4WS:nfs-utils-lib-0:1.0.6-8.z1.i386",
            "4WS:nfs-utils-lib-0:1.0.6-8.z1.ia64",
            "4WS:nfs-utils-lib-0:1.0.6-8.z1.src",
            "4WS:nfs-utils-lib-0:1.0.6-8.z1.x86_64",
            "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.i386",
            "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.ia64",
            "4WS:nfs-utils-lib-debuginfo-0:1.0.6-8.z1.x86_64",
            "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.i386",
            "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.ia64",
            "4WS:nfs-utils-lib-devel-0:1.0.6-8.z1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0913"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "krb5 RPC library buffer overflow"
    }
  ]
}