Home > Vulnerability Database > CVE-2010-1324

Mend.io Vulnerability Database

CVE-2010-1324

Good to know:

Date: December 2, 2010

MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.

Language: C

Severity Score

3.7

Related Resources (30)

Url: http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0925.html

Url: http://www.securitytracker.com/id?1024803

Url: http://www.securityfocus.com/bid/45116

Url: http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Url: http://www.ubuntu.com/usn/USN-1030-1

Url: http://support.apple.com/kb/HT4581

Url: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-1324

Url: http://www.vupen.com/english/advisories/2010/3095

Url: http://www.vupen.com/english/advisories/2010/3094

Url: http://secunia.com/advisories/42399

Url: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-007.txt

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:246

Url: http://www.vupen.com/english/advisories/2010/3118

Url: http://lists.vmware.com/pipermail/security-announce/2011/000133.html

Url: http://www.securityfocus.com/archive/1/514953/100/0/threaded

Url: http://osvdb.org/69609

Url: http://marc.info/?l=bugtraq&m=129562442714657&w=2

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051999.html

Url: http://kb.vmware.com/kb/1035108

Url: http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html

Url: https://access.redhat.com/security/cve/CVE-2010-1324

Url: http://www.vupen.com/english/advisories/2011/0187

Url: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/051976.html

Url: http://www.securityfocus.com/archive/1/517739/100/0/threaded

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11936

Url: http://www.vmware.com/security/advisories/VMSA-2011-0007.html

Url: http://secunia.com/advisories/43015

Url: https://www.mend.io/vulnerability-database/CVE-2010-1324

Severity Score

3.7

Weakness Type (CWE)

Cryptographic Issues

CWE-310

Top Fix

Upgrade Version

Upgrade to version kfw-4.0-final,krb5-1.10-alpha1

Learn More

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-1324

Good to know:

Date: December 2, 2010

Language: C

Severity Score

Related Resources (30)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?